Forum Discussion
What if a user is common in dynamic RLS report across two roles
Hi Rajnish366
Thanks for reaching out to Microsoft Fabric Community Forum.1.This is likely a role based on the UserPrincipalName() DAX function, which is commonly used to assign permissions to users based on their email addresses or usernames.
2.This role is based on a condition where a DAX expression evaluates to True() for users who meet a specific condition (in this case, users who belong to certain Active Directory groups).3.when multiple roles are assigned to a user, the most restrictive role generally takes precedence.
- If both roles apply to a user, the system will apply both sets of filters together unless there's an explicit conflict (such as one role restricting a value while another allows it).
- If the "Super Users" role is set up with broader access (e.g., True() condition for certain users), it may override or provide broader access than the "Email" role, depending on the conditions of the "Email" role.
Addtionally For the UserprincipalName() function, you can refer to :
DAX USERPRINCIPALNAME - Use in RLS - Power BI DocsAnd for how dynamic rls sample model , you can refer to :
Dynamic Row Level Security with Power BI Made Simple - RADACADIf this post was helpful, please consider marking Accept as solution to assist other members in finding it more easily.
If you continue to face issues, feel free to reach out to us for further assistance!
Hi @GilbertQ,
In my model i have created two role 1. Email = Userprinciplename () 2. Super users where dax is only True ().
Few users are part common member of AD groups which i added in both roles.
My question is which role will dominate here in this case.
Thanks for your time.
Community SupportHi Rajnish366
Thanks for reaching out to Microsoft Fabric Community Forum.
1.This is likely a role based on the UserPrincipalName() DAX function, which is commonly used to assign permissions to users based on their email addresses or usernames.
2.This role is based on a condition where a DAX expression evaluates to True() for users who meet a specific condition (in this case, users who belong to certain Active Directory groups).
3.when multiple roles are assigned to a user, the most restrictive role generally takes precedence.
- If both roles apply to a user, the system will apply both sets of filters together unless there's an explicit conflict (such as one role restricting a value while another allows it).
- If the "Super Users" role is set up with broader access (e.g., True() condition for certain users), it may override or provide broader access than the "Email" role, depending on the conditions of the "Email" role.
Addtionally For the UserprincipalName() function, you can refer to :
DAX USERPRINCIPALNAME - Use in RLS - Power BI Docs
And for how dynamic rls sample model , you can refer to :
Dynamic Row Level Security with Power BI Made Simple - RADACAD
If this post was helpful, please consider marking Accept as solution to assist other members in finding it more easily.
If you continue to face issues, feel free to reach out to us for further assistance!