RLS help!

[Anonymous]

I have a table "RLS" with two columns Department and User ID. I have a requirement where when a user logs in Power BI service they should only see data related to their department .

Eg abc@gmail.com sees only 1234. this is easy setup a role user ID = Userprincipalname()

My question - when users 123@gmail.com and 987@gmail.com login, they should see all the data in department. i.e rls shouldnt be applied.

Department	User ID
1234	abc@gmail.com
1235	xyz@gmail.com
All	123@gmail.com
1236	qwe@gmail.com
All	987@gmail.com

[amitchandak]

@Anonymous , refer if these can help for RLS - Row Level security
https://community.powerbi.com/t5/MBAS-Gallery/Microsoft-Power-BI-Unleash-row-level-security-patterns-in-Power/td-p/712613
https://radacad.com/dynamic-row-level-security-with-organizational-hierarchy-power-bi
https://www.blue-granite.com/blog/using-dynamic-row-level-security-with-organizational-hierarchies
https://docs.microsoft.com/en-us/power-bi/service-admin-rls
https://blog.tallan.com/2018/04/10/row-level-security-in-power-bi-part-1-roles-and-users/
https://radacad.com/what-do-you-need-to-implement-dynamic-row-level-security-in-power-bi

[Adescrit · Accepted solution]

Hi,

You can create multiple roles in Power BI desktop. So in your example you might want to create the following roles:

1. Department: This is where you set up your RLS as specified below. Filter user ID = Userprincipalname()
2. All: Create a role that does not contain any filters.

 

When you publish your report to Power BI service, you can add users 123@gmail.com and 987@gmail.com to the "All" role, and no filters will be applied when they access this Power BI report. 

[Anonymous]

Thanks for the response , is there a way to use if else condtion in the same role ? instead of creating two roles ?

[Adescrit]

Not that I'm aware of. Creating a new, blank role for any users who should see unfiltered data would be the simpler option.

[Anonymous]

Thanks for the solutions!

[v-jayw-msft]

Hi @Anonymous ,

I don't think so. Why you don't want to create multiple role?

Best Regards,

Jay