Forum Discussion
RLS security groups
@syasmin25 PLEASE don't cross post!!
Sorry, having trouble following, would need to see data model and RLS rules.
Not really enough information to go on, please first check if your issue is a common issue listed here: https://community.powerbi.com/t5/Community-Blog/Before-You-Post-Read-This/ba-p/1116882
Also, please see this post regarding How to Get Your Question Answered Quickly: https://community.powerbi.com/t5/Community-Blog/How-to-Get-Your-Question-Answered-Quickly/ba-p/38490
The most important parts are:
1. Sample data as text, use the table tool in the editing bar
2. Expected output from sample data
3. Explanation in words of how to get from 1. to 2.
I am providing the sample here. I have a Manager's table,
| EID | Company Code | Position | UPN |
| 5002 | 402 | Manager | [email protected] |
| 5003 | 402 | Manager | [email protected] |
| 5070 | 403 | Manager | [email protected] |
| 5879 | 403 | Manager | [email protected] |
| 4566 | 402 | Manager | [email protected] |
| 4568 | 402 | Manager | [email protected] |
| 4598 | 403 | Manager | [email protected] |
| 4789 | 403 | Manager | [email protected] |
I have another table for visuals to demonstate the projects they are currently working on,
| EID | Company Code | Projects |
| 4568 | 402 | 4545-jk |
| 4789 | 403 | 8585-res |
| 4789 | 403 | 8585-res |
| 4598 | 403 | 7898-kl |
| 4789 | 403 | 8585-res |
| 4568 | 402 | 4545-jk |
| 4566 | 402 | 5056-qw |
| 4568 | 402 | 4545-jk |
| 4566 | 402 | 5056-qw |
| 4598 | 403 | 7898-kl |
| 4566 | 402 | 5056-qw |
| 4598 | 403 | 7898-kl |
| 4789 | 403 | 8585-res |
| 4568 | 402 | 4545-jk |
| 4566 | 402 | 5056-qw |
| 4568 | 402 | 4545-jk |
| 4566 | 402 | 5056-qw |
| 4566 | 402 | 5056-qw |
| 4598 | 403 | 7898-kl |
| 4566 | 402 | 5056-qw |
| 4789 | 403 | 8585-res |
| 4598 | 403 | 7898-kl |
| 4789 | 403 | 8585-res |
| 4568 | 402 | 4545-jk |
| 4568 | 402 | 4545-jk |
As you can see the employees have different company codes here. I have connected both the tables for RLS based on their Company Code. However, they only have one security group which I added in both the security part on Power BI server and also on the share. So, when I share a report to company 402, company 403 has complete access to it. They can even access information that is for higher officials in 402 which employees in 402 cannot access. Since the company codes aren't the same, shouldn't their view show restricted data?