dynamic RLS based on three columns no hierarchy but overlapping

[pawel_osipowski]

Hi,

I have three identical tables (middle) but each with different username column added for dynamic RLS purpose. No hierarchy among these added columns but they overlapp.

Each datatable stats are featured on separate pages (security here as well) and done by datatable specific measures. 

When I assign username to security profile for one of these tables (on dedicated page) limited data is visible but when I assign username to more than one security profile RLS no longer works and all data is visible (page security works). Profile example here:

 

What would be solution to keep security per user regardless of security profile numbers username is assigned to? 

[v-robertq-msft]

Hi, @pawel_osipowski 

According to your description, do you mean that you added one username to more than roles in the RLS?

In this case, RLS filters become additive. It means report users can see table rows that represent the union of those filters. You can refer to this link:

https://sqlskull.com/2021/02/19/row-level-security-rls-in-power-bi/

Maybe switching to the Dynamic Row Level Security with Organizational Hierarchy can be a choice for you:

https://radacad.com/dynamic-row-level-security-with-organizational-hierarchy-power-bi

https://radacad.com/dynamic-row-level-security-in-power-bi-with-organizational-hierarchy-and-multipl...

Thank you very much!

Best Regards,

Community Support Team _Robert Qin

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[pawel_osipowski]

Hi @v-robertq-msft , this is my case but I don't have hierarchy, more of two independent username sets to be used in RLS which intersect. When one username is added to more than one report security groups RLS stops to work and all is visible for the user.