Row Level Security - conflicting roles

[PetyrBaelish]

I have a situation where there is directly conflicting roles in a Power BI report - the same user as part of both of these roles.

Take the following data:

User 1 is part of the following 2 roles:

Role 1: [Department] = "IT"

Role 2: [Team] <> "Database"

Based on role 1, the user should only see rows 1-3 above, and according to role 2 the user should see rows 2-4.

When I tested as the user; they could see rows 1-3, i.e. Role 1. Role 2 is being ignored.

My purpose here is entirely to test conflicts in RLS; it appears that Role 1 has taken precedence over Role 2. Can anybody confirm if this is expected behaviour? If anything I would have expected the roles to merge to either show all data, or just show rows 2 & 3.

Is there any logic as to which role takes precedence: Role 1 was created first and is last alphabetically, is one of these factors what made it take precedence in this case?

I know grand rule is to create better roles that don't conflict - but for when users make mistakes and create conflicting roles, it would be useful to know how Power BI handles this to help identify conflicts easier.

[v-chuncz-msft · Accepted solution]

@PetyrBaelish 

Based on my test, the user will have a consolidated view of both roles.