Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Earn the coveted Fabric Analytics Engineer certification. 100% off your exam for a limited time only!

Reply
Anonymous
Not applicable

multiple RLS groups

Hi,

 

I'm wondering what will happen if one suer appears in multiple RLS groups. 

 

for example, I have a user who appears in two security groups as below. I need to give her access to full company a+b + partial company c (only logistic and legal department). 

 

How can  I tell power bi there is a "or" relationsip between two groups?

 

Dynamic Role1  
emailcompany 
a@bca 
a@bcb 
   
Dynamic Role2  
emailCompanyBuisness Area
a@bccLogistics
a@bccLegal
8 REPLIES 8
v-henryk-mstf
Community Support
Community Support

Hi @Anonymous ,

 

So your requirement want to create a role that can see the content in A, B, and C?

You can refer to the blog I provided, it should be able to help you: Dynamic Row Level Security with Organizational Hierarchy Power BI - RADACAD

 

If the problem is still not resolved, please provide detailed error information and let me know immediately. Looking forward to your reply.

 

Best Regards,
Henry

 

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

lbendlin
Super User
Super User

It gets even weirder.  You can have a user in two RLS groups with contradicting rules.

 

In general the more permissive rule overrides the more restrictive rule.

Can this still be done? Without RLS conflict?

 

Define "conflict".  Permissive rules override restrictive rules. No conflict here.

By conflict here, I mean for example, the first role restricts users to only one region's data and it shows all brand categories. The second role restricts the user to a particular brand category data for all regions. The user is getting an error here due to the conflict in the nature of the roles. Which one of these can be classfied as a lesser restrictive role? Or how to achieve that?

Macha
Frequent Visitor

Hi @lbendlin, any thoughts on this?

Is the user getting an actual error message or are they seeing one product for one region?

The user is getting an actual error message. The message is as follows:

 

Couldn't load the data for this visual

The query encountered security filters on a table relationship that cannot be reconciled for the current user. Please contact your administrator or developer to review role memberships and security definitions.

Please try again later or contact support. If you contact support, please provide these details.Hide details

  • Activity IDc0f2ff5e-e54a-4242-910c-0bc05bf193bd
  • Request IDdd86ba5e-8dc7-0e24-e6a1-3409265f52b7
  • Correlation IDf8c42532-e999-c296-5cba-6155ed79de6a
  • TimeTue Jun 14 2022 13:03:40 GMT+0530 (India Standard Time)
  • Service version13.0.18442.44
  • Client version2206.1.11664-train
  • Cluster URIhttps://wabi-us-north-central-redirect.analysis.windows.net/

     

Helpful resources

Announcements
April AMA free

Microsoft Fabric AMA Livestream

Join us Tuesday, April 09, 9:00 – 10:00 AM PST for a live, expert-led Q&A session on all things Microsoft Fabric!

March Fabric Community Update

Fabric Community Update - March 2024

Find out what's new and trending in the Fabric Community.

Top Solution Authors
Top Kudoed Authors