Forum Discussion
Dynamic row Level Security not working
Im using Adventureworks and in Power BI I have given a three employees our email addresses for the test
I have added an IsManager Conditional Column and made someone Manager.
Im the App Workspace Admin
Then in Manage roles I have created the following expression
IF(
MAXX(
Filter(
'DimEmployee',
'DimEmployee'[EmailAddress]=USERPRINCIPALNAME())
,'DimEmployee'[isManager]
)=0,
'DimEmployee'[EmailAddress]= USERPRINCIPALNAME(),
1=1
)
Find the Max in is Manager (Which is a 1. Everything else is zero) and if its not the manager then only display records for the User principal
If its 1, show everything. I think I got this from an example.
I then go into Service after a Publish and go to Test the row level secutity. I put myself and the other test user in and we can see all the records
I put in the email of the manager and no rows appear.
the DAX seems fine to me but the tests are coming back with completly the wrong results. All records when there should be just records against the person. And No records when they should be seeing everything
What have I dont wrong?
Yes I did.
Ive tried this again on a brand new very basic report in a new App workspace and it worked.
I have done exactly the same process.
8 Replies
- Hi there
I would suggest following this blog post by Reza Rad, which explains exactly what you are trying to achieve.
https://radacad.com/dynamic-row-level-security-with-manager-level-access-in-power-biThats absolutely the one I have used. I have read it so many times and mine still doesnt work
I think this is the thirs time I have attempted to do it from scratch using this blog. Are there any other blogs that I can follow for the same logic.
Basically the users who should only see their own information see all the info
And the user who should see everything sees nothing with this logic
HI DebbieE,
In fact, all records displayed not means your RLS works, it also appeared if users have edit permissions of your report.
Please double-check these user permission to confirm they only have read permission or RLS filter effect it works on these users.Row-level security (RLS) with Power BI#using-rls-with-workspaces-in-power-bi
Regards,
Xiaoxin Sheng
I believe GilbertQ's latest comment is the key to your issues with dynamic RLS.
if the emails have not been added to the security section of the dataset in the Power BI Service you'll experience the issues you've outlined in this thread.
