Hi everyone,
I’m running into an issue with a visual in my Power BI report that uses RLS (Row-Level Security) and parameters.
The report includes a table of email addresses (used as the principal user field), which connects correctly to two other data tables. RLS is working as expected across the report—except for one bar chart visual that uses parameters in the axis.
Here’s the setup:
The X-axis uses a parameter to switch between different measure fields.
The Y-axis uses another parameter for slicer-based values.
Both parameters are also available as slicers so users can control how the chart displays.
The issue: When a user selects a value from a parameter that isn’t related to user identity, the visual shows totals for all users instead of just their own data. This breaks the RLS logic and exposes data they shouldn’t see.
I’ve tried applying filters at the visual, page, and report level, but nothing seems to restrict the visual to only the RLS-filtered data. It seems like the parameters may be overriding or bypassing the RLS filtering somehow, but I’m not sure why.
Has anyone experienced this before or have any ideas on how to resolve it?
Thanks in advance!
