RLS

[Tracy000]

Hi team,

I got a question about RLS would like to ask for your kind advice, thank you.

Originally we have setup 1 role called Cost_AM_M1&M2, this role means user could only see Cost, can't see Revenue data, only see AM (for GEO), both M1 and M2 data access.

But now, we got change request to change the role, for M2 access, user should always see Revenue data as default, so that means we have to split this current role to 2 roles:

Split this role 'Cost_AM_M1&M2' to 2 roles as following:

Cost_AM_M1

Rev_AM_M2    (user with Rev access means he could see both Cost and Rev data)

For user A, origianlly he is in role 'Cost_AM_M1&M2', now I have to assign him to these 2 roles: 'Cost_AM_M1', 'Rev_AM_M2'.

Do you know if there is any impact with such change of RLS? Is it allowed to do like this way?
I asked this question because recently we got strange problems with our PBI dashboards, and also performance is not as good as before. I am not sure if there is any relationship with the RLS changes.

Thank you.

[Anonymous]

Hi @Tracy000 ,

It is often avoided to map a user to multiple roles, which can have unexpected results. Try creating a role like Cost_Rev_AM_M1_M2 for the user A.
Row-level security (RLS) guidance in Power BI Desktop - Power BI | Microsoft Learn

Best Regards,
Gao
Community Support Team

If there is any post helps, then please consider Accept it as the solution  to help the other members find it more quickly.
If I misunderstand your needs or you still have problems on it, please feel free to let us know. Thanks a lot!

How to get your questions answered quickly --  How to provide sample data in the Power BI Forum 

[Tracy000]

Hi, thanks for your reply.
It's hard to create 1 role for user A because his M1 access can't see revenue data, only M2 access could see revenue.

[ebee]

Hi,

I'd wager the performance has nothing to do with your RLS. Can you post the dax you use for those roles?

In power bi desktop, you can test a role to see how it affects performance. Modeling > View as.

[Tracy000]

Hi, thanks for your reply.
Originally we used dynamic RLS in our PBI, but it impacted few dashboards' performance a lot. Then we converted to normal/dynamic RLS, just filter the related data from the selected tables. For example, I filtered Cost, AM, M1 from the corresponding tables for role: Cost_AM_M1.