ROW LEVEL SECURITY (RLS)

[MJ23]

Hi everyone, 

I´ve set up RLS and dynamic RLS for two datsets and they work fine so far.

Now, I would to enable certain users to select certain items (different years, or different product categories) within their roles. On the other hand I woud like to disable this function for other user. In different words, for some users I want them to make use of the so called self service function and for others I want them to have a read only permission. Thank you very much!

[v-shex-msft · Accepted solution]

HI @MJ23,

AFAIK, RLS only works on users who has read permission. For dataset owner, admin or other users who has edit permission, RLS not works for them.

If you mean unlock some data form specific users which not suitable for current RLS setting, I think you need to coding formula for multiple level RLS.

For example:

Current dynamic RLS setting: username function -> User table(RLS filter) -> other tables.

Modified dynamic RLS setting: username function -> User table -> user role table(RLS filter) <- other tables.

Regards,

Xiaoxin Sheng