cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
SarikaKumari18
Helper III
Helper III

Need Help with DAX for Dynamic RLS to avoid bi-directional relationship

Hi all, 

 

have to implement dynamic RLS on country where one user is allowed to see their own country data wheen user is not manager and if user is manager(IsManager=1)they should see all countries data means no RLS.

 

Please note that I shouldn't use bidrectional relationship in my data model so that role should be applied on country table that should filter FACT table.

 

Employee-Country table looks like below

| UserID | Email Address | Country    | IsManager |
|--------|---------------|------------|-----------|
| 1      | a.a@gmail.com | Finland    | 0         |
| 2      | r.e@gmail.com | Italy      | 0         |
| 3      | l.c@gmail.com | Spain      | 0         |
| 4      | p.l@gmail.com | Belgium    | 0         |
| 5      | r.f@gmail.com | AllCountry | 1         |
| 6      | m.k@gmail.com | AllCountry | 1         |
| 7      | m.c@gmail.com | Finland    | 0         |
| 8      | u.p@gmail.com | Belgium    | 0         |
| 9      | p.j@gmail.com | Finland    | 0          |

Country Table

| Country | CountryID |
|---------|-----------|
| Finland | 1         |
| Belgium | 2         |
| Italy   | 3         |
| Spain   | 4         |

Fact Table

| FactID | Country | Amount |
|--------|---------|--------|
| a      | Finland | 100    |
| b      | Italy   | 200    |
| c      | Spain   | 300    |
| d      | Belgium | 400    |
| e      | Belgium | 200    |
| f      | Italy   | 150    |
| g      | Spain   | 300    |
| h      | Spain   | 390    |
| i      | Belgium | 400    |

Data Model looks like

SarikaKumari18_0-1653153029089.png

 

Employee Country and Country is Joined on Country column

Fact table is joined with Country on Country column

I am trying the below DAX in Country table but its not working when user is not manager 

IF(
LOOKUPVALUE('Employee-Country'[IsManager],'Employee-Country'[Email Address],USERPRINCIPALNAME())=1,
TRUE(),
MAX('Employee-Country'[Email Address])= USERPRINCIPALNAME())

 

Any help would be much appreciated

Thank you in advance!

 

3 REPLIES 3
v-jayw-msft
Community Support
Community Support

Hi @SarikaKumari18 ,

 

Will you consider to change the direction of the relationship to "Both" and check again?

 

Best Regards,

Jay

Community Support Team _ Jay
If this post helps, then please consider Accept it as the solution
to help the other members find it.

Thanks @v-jayw-msft for your response, It works fine with bidirectional relationship

SarikaKumari18
Helper III
Helper III

@Jihwan_Kim  could you please help with DAX whenever you will have time . 
Thank you

Helpful resources

Announcements
August 2022 update 768x460.jpg

Check it Out!

Click here to learn more about the August 2022 updates!

August 1 episode 9_no_dates 768x460.jpg

The Power BI Community Show

Watch the playback when Priya Sathy and Charles Webb discuss Datamarts! Kelly also shares Power BI Community updates.

Power Platform Conf 2022 768x460.jpg

Join us for Microsoft Power Platform Conference

The first Microsoft-sponsored Power Platform Conference is coming in September. 100+ speakers, 150+ sessions, and what's new and next for Power Platform.

Top Solution Authors
Top Kudoed Authors