Desktop

[paruchuri447]

Hi Community,

I have implemented dynamic row level security and added table filters in manage roles as below. the below is created in  Employee table. 

CONTAINS(
Users,
Users[Email ID],
USERNAME(),
Users[state],
[state]
)

Users Table:

Account ID,       Email ID,                           State

123                    krishan.1@gmail.com       MD,PA,OH

144                    k.2@gmail.com                 

Employee Table:

Account ID,    Employee phone number, Employee state, Employee City

123                 1234567890                       MD                     Glenbernie

144                  4567777774                      NY                       Jefferson

If i use above DAX expression when i logged in as krishan.1@gmail.com it is restricting but when i logged in with k.2@gmail.com the report is showing blank because there is no data in users table. 

If there is no records for state in users table then it has to show everything.

How can do this.

Please help.

Thanks,

Paruchuri

[v-yuezhe-msft · Accepted solution]

@paruchuri447,

Add a role column in your user table as below.

Role=IF(Users[State]="","Admin",BLANK())

Account ID,                 Email ID,                         State            Role

123                              krishan.1@gmail.com    MD,PA,OH

144                              k.2@gmail.com                                  Admin

Then add DAX filter as follows.

CONTAINS (
Users,
Users[Email ID],
USERNAME(),
Users[Role],
"Admin"
)
||
CONTAINS(
Users,
Users[Email ID],
USERNAME(),
Users[state],
[state]
)

Reference:
https://www.tringuyenminh92.com/index.php/2017/08/11/dynamic-rls-row-level-security-with-power-bi/


Regards,
Lydia

[v-yuezhe-msft · Accepted solution]

@paruchuri447,

Add a role column in your user table as below.

Role=IF(Users[State]="","Admin",BLANK())

Account ID,                 Email ID,                         State            Role

123                              krishan.1@gmail.com    MD,PA,OH

144                              k.2@gmail.com                                  Admin

Then add DAX filter as follows.

CONTAINS (
Users,
Users[Email ID],
USERNAME(),
Users[Role],
"Admin"
)
||
CONTAINS(
Users,
Users[Email ID],
USERNAME(),
Users[state],
[state]
)

Reference:
https://www.tringuyenminh92.com/index.php/2017/08/11/dynamic-rls-row-level-security-with-power-bi/


Regards,
Lydia

[paruchuri447]

Hi Lydia,

When i add "Admin"  Role column, The customer is seeing everything like he can see other customers data also. I don't want that. 

For example if customer k.2@gmail.com logs in he is able to see only his data but here when he logs in he is seeing krishan.1@gmail.com data also.

Thanks,

Paruchuri

[v-yuezhe-msft]

@paruchuri447,

What data do you want the k.2@gmail.com  user to see? As your original post, the  k.2@gmail.com  user needs to see everything when there is no data in State column.                     

Regards,
Lydia