Row level Security

[Macha]

Hi! I am facing an issue with RLS. I have defined RLS roles such that some roles have filter for a particular region, and others have filter for a particular category for all regions. Now groups with bulk members have been added to these roles. Recently, the users in the groups are facing the issue that if they are in two groups assigned to conflicting roles like the above, the visuals do not load due to role conflict. I wanted to know if there was any way I could keep the current RLS setup undisturbed, and get Power BI to show the least restrictive filter of the two or a union of the two?

[Macha]

The error message for the same is:

Couldn't load the data for this visual

The query encountered security filters on a table relationship that cannot be reconciled for the current user. Please contact your administrator or developer to review role memberships and security definitions.

Please try again later or contact support. If you contact support, please provide these details.Hide details

• Activity IDc0f2ff5e-e54a-4242-910c-0bc05bf193bd
• Request IDdd86ba5e-8dc7-0e24-e6a1-3409265f52b7
• Correlation IDf8c42532-e999-c296-5cba-6155ed79de6a
• TimeTue Jun 14 2022 13:03:40 GMT+0530 (India Standard Time)
• Service version13.0.18442.44
• Client version2206.1.11664-train
• Cluster URIhttps://wabi-us-north-central-redirect.analysis.windows.net/
•  

[Macha]

Hi @v-yangliu-msft this is not really what I am facing. My issue is that the individuals who have been added to more than one role (inside security groups) are not being able to see any visual. In short, they are facing the error that the model is not loading for them. 

[v-yangliu-msft]

Hi  @Macha ,

There is a restriction on RLS in the official documentation:

When you use RLS, the role of the user in the workspace must be View, otherwise the RLS fails and the user sees all the data

https://docs.microsoft.com/en-us/power-bi/enterprise/service-admin-rls#using-rls-with-workspaces-in-...

Best Regards,

Liu Yang

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.