Dashboard with multiple RLS roles work in My Workspace but fails in Premium workspace

[Anonymous]

I have set up a dashboard with dataset for users similar to this blog: https://radacad.com/dynamic-row-level-security-with-profiles-and-users-in-power-bi

User table

user_name	user_email
user1	user1@mail.com
user2	user2@mail.com
user3	user3@mail.com

User Profile table

user_email	profile_name
user1@mail.com	profile1
user1@mail.com	profile2
user2@mail.com	profile2
user3@mail.com	profile3

Profile table

profile_name	profile_status
profile1	prod
profile2	prod
profile3	prod

Relationship:

User (1) --[cross filter: single]--> (*) User Profile (*) --[cross filter: single (user profile filters profile)]--> (*) Profile

I have also set up a bunch of static RLS roles for security groups with the same name for the profiles. One user can belong to multiple RLS roles

DAX expression are set up in the following tables

User table - Dynamic RLS: [user_email] = USERNAME()

User Profile table - Static RLS: [user_email] = USERNAME() || [profile_name] = "profile1"

The dashboard when tested for multiple roles including both static and dynamic RLS roles, works fine in PowerBI Desktop and also My Workspace after published. Somehow, the dashboard stopped working after published to a Premium workspace. Has anyone experience this before?

Would greatly appreciate if anyone knows how to fix this or could give some pointers on how to fix this.

[v-jayw-msft · Accepted solution]

Hi @Anonymous ,

This issue has been submitted internally.

Internal ICM ID: 280683445.

If there is any news, I will update it here.

Best Regards,

Jay

[Carlsson]

Any news? It´s been a while now.

[v-jayw-msft]

Hi @Anonymous ,

Please check the public document with the scenario and its limitation.
https://docs.microsoft.com/en-us/power-bi/admin/service-admin-rls#issue-multiple-roles-and-limited-relationships

Best Regards,

Jay

[TheOctopus]

Same as Carlsson; I really need a fix for this, the workaround here is not simple to implement in our model and it has been working for over a year previously

[Carlsson]

This was working fine before. I´m aware of the workarounds but.. not ideal.

Do you have any idea when the solution will be in place?

[PBI1726]

We are still facing the same problem - a combination of dynamic and static roles causes the issue that users don't see any data anymore. As mentioned by Carlsson, the workarounds are not ideal at all. 
Is there any news about when a solution will be in place? It's quite a while now since January...

[stxreporting]

Hi, 

I would also like to report that this is happening in my organisation. Only when people are in multiple roles.

Any update on this?

Thanks,

Chris

[TheOctopus]

Any further updates on this? I am also experiencing this issue

[spencercleaver]

Any news on updates?  It's causing large issues for our organization now.  Thanks!

[bcdobbs]

Don't think it's a fix as such but have a read through this thread 

https://community.powerbi.com/t5/Desktop/Users-with-multiple-security-roles-suddenly-can-t-see-data/...

As far as we could tell in the December release of power bi desktop and service many to many cardinality relationships stopped working when multiple roles were selected. 

Suspect if you upgrade power bi desktop you'll get the same error. The slightly odd bit is reading your post sounds like it is still working ok in My Workspace?

[Anonymous]

Well the dashboard was working with the multiple RLS roles about 3 weeks ago and stopped working in Jan 2022. So, I did suspect some sort of update might be the cause but my version of the PI Desktop is the Sept 2021 version. 

I also understand the odd part about the dashboard working on one workspace and not on another workspace. I tried changing the file name to test just in case it wasn't a caching issue but same results. I really do not get why it stopped working in Premium workspace. Not sure if the powerbi service workspaces are different - Premium vs personal workspace.

[bcdobbs]

Out at the moment but I'll try uploading my test file to my workspace do see if we get the same result.

All a bit odd!

[Anonymous]

A bit more information. I do get similar error as the thread you shared regarding security filters = both. However, I do not have security filter enabled for any of the relationships for all my tables. I may have some relationships with cross filter = both but not security filter enabled for any of them. 

Error msg: "The user belongs to multiple roles 'profile1, profile2' that have security filters, which isn't supported when one of the roles has filters affecting table 'records' with SecurityFilteringBehavior=Both relationships."

[bcdobbs]

Looking at your relationships and demo data...

"

Relationship:

User (1) --[cross filter: single]--> (*) User Profile (*) --[cross filter: single (user profile filters profile)]--> (*) Profile"

why is User Profile to Profile, Many to Many? 

[Anonymous]

That's the only way to get it working when user is assigned to 2 roles with both static and dynamic RLS roles.