One person in multiple roles RLS

[xhurit]

Hi,

I have my dataset configured for RLS and I created 2 groups - ALL and RLS.

Group ALL was created for people that should see all of the data.

Group RLS has traditional function as [USERNAME] = USERPRINCIPALNAME() and works fine.

The problem is that I have one manager which is assigned to group ALL but he is also a member of mail alias which is assigned to group RLS. 

Therefore Power BI automatically determines the most strict role when he opens the dashboard and it limits the data. How can I force Power BI to choose ALL group just for this one guy?

Regards

[v-jayw-msft · Accepted solution]

Hi @xhurit ,

Try modifying Group RLS as [USERNAME] = USERPRINCIPALNAME()&&USERPRINCIPALNAME()<>"the manager"

Best Regards,

Jay

[GilbertQ]

Hi @xhurit 

Why would you want them in both if they can see everything?

I would just have the under in the everything group and they can then filter the data they need to see.

[ibarrau]

Hi. I don't think you can do that. That's Power Bi default behaviour.  If you can't remove him from that group and this is a unique case that won't be repeated, you can add a hardcode rule for RLS with an IF.

IF ( [USERNAME] <> uniquecase@company.com; [USERNAME] = USERPRINCIPALNAME() )

You can play with the rule. However the recommendation would be removing the person from RLS group because it should see ALL.

I hope that helps,