Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
7 years ago
Solved

Row Level Security - conflicting roles

I have a situation where there is directly conflicting roles in a Power BI report - the same user as part of both of these roles.

 

Take the following data:

 

User 1 is part of the following 2 roles:

 

Role 1: [Department] = "IT"

Role 2: [Team] <> "Database"

 

Based on role 1, the user should only see rows 1-3 above, and according to role 2 the user should see rows 2-4.

 

When I tested as the user; they could see rows 1-3, i.e. Role 1. Role 2 is being ignored.

 

My purpose here is entirely to test conflicts in RLS; it appears that Role 1 has taken precedence over Role 2. Can anybody confirm if this is expected behaviour? If anything I would have expected the roles to merge to either show all data, or just show rows 2 & 3.

 

Is there any logic as to which role takes precedence: Role 1 was created first and is last alphabetically, is one of these factors what made it take precedence in this case?

 

I know grand rule is to create better roles that don't conflict - but for when users make mistakes and create conflicting roles, it would be useful to know how Power BI handles this to help identify conflicts easier.

  • Anonymous 

     

    Based on my test, the user will have a consolidated view of both roles.

1 Reply

  • v-chuncz-msft's avatar
    v-chuncz-msft
    Icon for Community Support rankCommunity Support

    Anonymous 

     

    Based on my test, the user will have a consolidated view of both roles.