Forum Discussion

Lee_D2022's avatar
Lee_D2022
Regular Visitor
4 years ago

RLS Only Works For Some Users

We have a problem with our RLS whereby it is working for some users and not others, for these it is displaying all records unfiltered.   All users have the same permission level for the Workspace a...
Need Help
otravers's avatar
otravers
Community Champion
4 years ago

Do you have an RLS role that can view everything? What's the DAX expression that defines it?

Lee_D2022's avatar
Lee_D2022
Regular Visitor
4 years ago

It passes userprinciplename to the users name (code below)

There is a role that sees everything.  This doesn't have any filters applied.

DAX

Username =
var atpos = iferror(search("@",USERPRINCIPALNAME()),0)
return
if(atpos > 0,SUBSTITUTE(left(USERPRINCIPALNAME(),atpos-1),"."," "),"Error")
  • otravers's avatar
    otravers
    Community Champion
    4 years ago

    I suggest you create a table in a new report page with each user's UPN and then a column with that DAX expression. Publish it in the service to see the UPN resolve to emails.

    • Lee_D2022's avatar
      Lee_D2022
      Regular Visitor
      4 years ago

      That sheds a little more light on the situation.  The problem users are returning my name and, as I'm in the see all group, they can then see all.

       

      Why would this happen for some users and not all of them?  Could it be how their profile is set up?

      • otravers's avatar
        otravers
        Community Champion
        4 years ago

        Yeah I'd review these users' profiles in AAD and how they're different from those that work as expected.