RLS with multiple roles in Power BI - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does RLS stand for in Power BI?

RLS stands for Row-Level Security. It controls data access by restricting rows in tables based on user roles.

intermediate

How does Power BI handle multiple roles for a single user?

Power BI combines all roles assigned to a user using a logical OR. The user sees data allowed by any of their roles.

beginner

What is a practical example of using multiple roles in RLS?

Imagine a sales manager who is also part of the finance team. They get access to sales data for their region (role 1) and financial reports (role 2). Both roles apply together.

intermediate

How do you test multiple roles in Power BI Desktop?

Use the 'View as Roles' feature. Select multiple roles to simulate combined access and verify the data shown matches expectations.

beginner

Can a user be assigned to no roles in Power BI RLS?

Yes. If a user has no roles assigned, they see all data unless the model has a default deny rule or other restrictions.

What happens when a user belongs to multiple RLS roles in Power BI?

A They see no data unless roles are merged manually.

B They see only data allowed by the first role assigned.

C They see data allowed by all their roles combined.

D They must choose one role to view data.

Power BI combines all roles assigned to a user using a logical OR, so the user sees data allowed by any of their roles.

Which Power BI feature lets you simulate multiple roles to test RLS?

A Data view

B View as Roles

C Manage Roles

D Publish to Web

The 'View as Roles' feature allows you to select one or more roles to simulate how data appears for users with those roles.

If a user has no roles assigned in RLS, what data do they see by default?

A All data in the model

B Only data from the first table

C No data at all

D Data filtered by the last role created

Without any roles assigned, users see all data unless the model has explicit deny rules.

Which logical operator does Power BI use to combine multiple roles for a user?

A XOR

B AND

C NOT

D OR

Power BI uses a logical OR to combine multiple roles, meaning data allowed by any role is visible.

Why might you assign multiple roles to a single user in Power BI?

A To give access to different data sets based on job functions

B Because Power BI requires at least two roles per user

C To confuse the user

D To restrict data more strictly

Multiple roles let you tailor data access for users with multiple responsibilities or job functions.

Explain how Power BI combines multiple RLS roles assigned to a user and why this is useful.

Think about how access from different roles adds up.

Describe how you would test multiple RLS roles in Power BI Desktop before publishing a report.

Look for a feature that simulates user roles.

Practice

1. What does RLS with multiple roles in Power BI allow you to do?

easy

A. Control data access by assigning users to one or more roles

B. Create multiple dashboards for different users

C. Automatically refresh data at different times

D. Change the data source connection dynamically

Solution

1. Step 1: Understand RLS purpose

   RLS (Row-Level Security) controls which data a user can see based on roles.

2. Step 2: Recognize multiple roles effect

   Assigning multiple roles means a user sees data allowed by any of those roles (combined access).

3. Final Answer:

   Control data access by assigning users to one or more roles -> Option A

4. Quick Check:

   RLS multiple roles = combined data access [OK]

Hint: RLS controls data visibility by roles combined with OR logic [OK]

Common Mistakes:

• Confusing RLS with dashboard creation
• Thinking RLS changes data refresh
• Believing RLS changes data source

2. Which of the following is the correct way to define a role filter in Power BI Desktop for multiple roles?

easy

A. Assign users directly in Power BI Desktop without roles

B. Use DAX filter expressions for each role separately under 'Manage Roles'

C. Write SQL queries inside Power BI Desktop to filter roles

D. Create a single role and assign all users to it

Solution

1. Step 1: Understand role creation in Power BI Desktop

   Roles are created by defining DAX filter expressions under 'Manage Roles'.

2. Step 2: Recognize multiple roles setup

   Each role has its own filter; multiple roles mean multiple filters defined separately.

3. Final Answer:

   Use DAX filter expressions for each role separately under 'Manage Roles' -> Option B

4. Quick Check:

   Role filters use DAX expressions in 'Manage Roles' [OK]

Hint: Define each role filter with DAX in 'Manage Roles' [OK]

Common Mistakes:

• Trying to use SQL queries inside Power BI Desktop
• Assigning users directly without roles
• Using only one role for all users

3. Given two roles in Power BI: RoleA filters 'Region' = "East" and RoleB filters 'Sales' > 1000. If a user is assigned both roles, what data will they see?

medium

A. Data where Sales > 1000 but Region can be any value

B. Only data where Region = "East" AND Sales > 1000

C. Data where Region = "East" but Sales can be any value

D. Data where Region = "East" OR Sales > 1000

Solution

1. Step 1: Understand multiple roles filter logic

   When a user has multiple roles, Power BI combines filters with OR logic, not AND.

2. Step 2: Apply OR logic to given roles

   User sees data where Region = "East" OR Sales > 1000, meaning either condition allows data visibility.

3. Final Answer:

   Data where Region = "East" OR Sales > 1000 -> Option D

4. Quick Check:

   Multiple roles combine filters with OR [OK]

Hint: Multiple roles combine filters with OR, not AND [OK]

Common Mistakes:

• Assuming filters combine with AND logic
• Confusing role assignment with user permissions
• Thinking roles restrict data more strictly

4. You created two roles with filters but users assigned to both roles see all data. What is the most likely cause?

medium

A. Users were not assigned to roles in Power BI Service

B. Roles were created but not saved in Power BI Desktop

C. Data source connection is broken

D. Filters use AND logic instead of OR, causing no matching data

Solution

1. Step 1: Check user assignment to roles

   Even if roles exist, users must be assigned in Power BI Service to see filtered data.

2. Step 2: Understand effect of missing assignment

   If users are not assigned, RLS filters do not apply, resulting in all data visible.

3. Final Answer:

   Users were not assigned to roles in Power BI Service -> Option A

4. Quick Check:

   User assignment in service is required for RLS [OK]

Hint: Assign users to roles in Power BI Service to enable RLS [OK]

Common Mistakes:

• Assuming filters combine with AND logic
• Ignoring user assignment step
• Blaming data source connection first

5. You have three roles: Role1 filters 'Country' = "USA", Role2 filters 'Product' = "A", Role3 filters 'Year' = 2023. A user is assigned Role1 and Role3. Which DAX expression correctly represents the combined filter effect for this user?

hard

A. FILTER(Table, Table[Country] = "USA" && Table[Product] = "A" && Table[Year] = 2023)

B. FILTER(Table, Table[Country] = "USA" && Table[Year] = 2023)

C. FILTER(Table, Table[Country] = "USA" || Table[Year] = 2023)

D. FILTER(Table, Table[Product] = "A" || Table[Year] = 2023)

Solution

1. Step 1: Understand role filter combination logic

   When a user has multiple roles, Power BI combines filters with OR logic, so data matching any role filter is visible.

2. Step 2: Apply OR logic to Role1 and Role3 filters

   The combined filter is where Country = "USA" OR Year = 2023, ignoring Role2 since user is not assigned to it.

3. Final Answer:

   FILTER(Table, Table[Country] = "USA" || Table[Year] = 2023) -> Option C

4. Quick Check:

   Multiple roles combine filters with OR [OK]

Hint: Combine multiple role filters with OR in DAX [OK]

Common Mistakes:

• Using AND instead of OR to combine filters
• Including filters from roles not assigned to user
• Confusing role filters with user permissions