Forum Discussion

Lee_D2022's avatar
Lee_D2022
Regular Visitor
4 years ago

RLS Only Works For Some Users

We have a problem with our RLS whereby it is working for some users and not others, for these it is displaying all records unfiltered.   All users have the same permission level for the Workspace a...
Need Help
otravers's avatar
otravers
Community Champion
4 years ago

I suggest you create a table in a new report page with each user's UPN and then a column with that DAX expression. Publish it in the service to see the UPN resolve to emails.

Lee_D2022's avatar
Lee_D2022
Regular Visitor
4 years ago

That sheds a little more light on the situation.  The problem users are returning my name and, as I'm in the see all group, they can then see all.

 

Why would this happen for some users and not all of them?  Could it be how their profile is set up?

  • otravers's avatar
    otravers
    Community Champion
    4 years ago

    Yeah I'd review these users' profiles in AAD and how they're different from those that work as expected.

    • Lee_D2022's avatar
      Lee_D2022
      Regular Visitor
      4 years ago

      Just sat with the IT team and compared AAD profiles and there's nothing discernably different between the two.

      • otravers's avatar
        otravers
        Community Champion
        4 years ago

        What happens if you just use USERPRINCIPALNAME() as the DAX expression for the "see all" profile instead of your conditional logic?