Forum Discussion
What if a user is common in dynamic RLS report across two roles
Q 1. In my Dynamic RLS PBI report few users are common across two roles (being part of two different group added in Role 1 and Role 2 as super user) what will happen in this case. which role will be effective?
Q 2. Pls suggest the impact of Bi-directional (security applied at both side) many to one relation in a Dynamic RLS reoprt.
Hi Rajnish366
Thanks for reaching out to Microsoft Fabric Community Forum.1.This is likely a role based on the UserPrincipalName() DAX function, which is commonly used to assign permissions to users based on their email addresses or usernames.
2.This role is based on a condition where a DAX expression evaluates to True() for users who meet a specific condition (in this case, users who belong to certain Active Directory groups).3.when multiple roles are assigned to a user, the most restrictive role generally takes precedence.
- If both roles apply to a user, the system will apply both sets of filters together unless there's an explicit conflict (such as one role restricting a value while another allows it).
- If the "Super Users" role is set up with broader access (e.g., True() condition for certain users), it may override or provide broader access than the "Email" role, depending on the conditions of the "Email" role.
Addtionally For the UserprincipalName() function, you can refer to :
DAX USERPRINCIPALNAME - Use in RLS - Power BI DocsAnd for how dynamic rls sample model , you can refer to :
Dynamic Row Level Security with Power BI Made Simple - RADACADIf this post was helpful, please consider marking Accept as solution to assist other members in finding it more easily.
If you continue to face issues, feel free to reach out to us for further assistance!
