Our team would like join to our security mapping table in the rule and call the employee that is querying's username and filter by it. It would look like:
select * from my_table
inner join security_table
on security_table.projectID = my_table.projectID
where security_table.username = username()
This would allow us to dynamically set our RLS on the table.
2 Comments
- Not possible. RLS rule SQL syntax doesn't support joins. See https://learn.microsoft.com/en-us/fabric/onelake/security/row-level-security#syntax-rules Functions such as USERPRINCIPALNAME() are also not valid. See https://community.fabric.microsoft.com/t5/Fabric-platform/Row-Level-Security-in-OneLake-preview-Major-limitations/m-p/4650566/highlight/true#M14569
- Hey watermelonjam - thanks for sharing the link. It's nice to see why USERNAMEPRINCIPALNAME() function is not currently available in OneLake Security. Good to know moving forward, MS is working on a solution to implement this in the future. Will keep my eyes out for any GA announcement regarding the implementation.
