RLS with Multiple Roles

[Nichita_J]

Hello All,

 Can someone suggest the best way to resolve this issue.
I have a RLS created Role 1 on Table A using userprinciple name
Role 2 on Table B using Userprinciple name. 
This works fine individually. I plan to role 2 Power BI Reports One for each role. Eventually might add all reports to One Power BI App and secure through two different Audiences.
But i have few users who should be part of Role 1 & Role 2. When testing a user with both the roles the data is filtered incorrectly. How to resolve this? 

[v-bmanikante]

Hi @Nichita_J ,

As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided for the issue worked? or Let us know if you need any further assistance?

If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.

Regards,

B Manikanteswara Reddy

[v-bmanikante]

Hi @Nichita_J ,

we wanted to kindly follow up to check if the solution provided for the issue worked? or Let us know if you need any further assistance?
If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.

Regards,
B Manikanteswara Reddy

[v-bmanikante]

Hi @Nichita_J ,

Thank you for reaching out to Microsoft Fabric Community forum.

@lbendlin Thank you for your quick response.

Instead of using two roles, create one combined RLS role with conditional logic like:

OR(
RELATED(UsersAdmin[UserPrincipalName]) = USERPRINCIPALNAME(),
PATHCONTAINS(ManagerData[SupervisorPath], USERPRINCIPALNAME())
)

You'll write this logic in a calculated column or as a DAX filter on a bridge/junction table if necessary. This will allow you to assign one unified role and let the logic handle who sees what.

If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it!

Regards,
B Manikanteswara Reddy

[Nichita_J]

Sorry for incomplete information. I am curious to know how to handle security for users who should be part of both the roles. As of now i have 3 reports one for each role i want report one to filter by Supervisor path and report 2 to filter by ID

[lbendlin · Accepted solution]

Consider using Dynamic RLS instead. That allows you to specify the securables per individual user.

[lbendlin]

Please be more specific. What does "incorrectly" mean?  What is your expected outcome?

Note that more permissive rules take precedent over more restrictive rules.