RLS

[RobbeVL]

Hi,

I have a question regarding to Row Level Security.

I have successfully set up a RSL by using a bridge table and a relationship.

But some individuals have access to ALL data, how can I add this to my RLS Dax measure?
So now I have :

[Mail] = USERPRINCIPALNAME()

The bridgetable contains Mail & Unit.
When the username has "All" as Unit, it shouldnt filter
When it has something else, it should filter on Unit.

Any help?

Robbe

[v-lid-msft]

Hi @RobbeVL ,

You can try to use the following DAX to filter RLS, but remember that people who have edit permission will always see the all data regardless of the filter.

VAR u =
    LOOKUPVALUE ( 'User'[Unit], 'User'[Mail], USERPRINCIPALNAME () )
RETURN
    IF ( u = "ALL", TRUE (), [Unit] = u )

BTW, pbix as attached.

Best regards,

Community Support Team _ DongLi
If this post helps, then please consider Accept it as the solution to help the other members find it more

[RobbeVL]

Hi,

This almost works, What I might nog have mentioned is the following:

Some users are allowed to see multiple units. So my data looks like:

'AccessList'

Unit1 --- Angela@xx.com

Unit2 --- Angela@xx.com

'BU_List'

Unit 1

Unit 2

Unit 3

LOOKUPVALUE can only return 1 value, so it gives me an error when I view as a person who can see multiple Units.

Any workaround?

Robbe

[v-lid-msft · Accepted solution]

Hi @RobbeVL ,

You can try to use the following DAX to filter RLS.

VAR t =
    FILTER ( User, [Mail] = USERPRINCIPALNAME () )
VAR u = [Unit]
RETURN
    IF ( CONTAINS ( t, [Unit], "ALL" ), TRUE (), CONTAINS ( t, [Unit], u ) )

BTW, pbix as attached.

Best regards,

Community Support Team _ DongLi
If this post helps, then please consider Accept it as the solution to help the other members find it more