Static RLS rules in Power BI - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ dax_lod_result

intermediate

DAX Measure Result with Static RLS

Given a table 'Sales' with columns 'Region' and 'Amount', and a static RLS rule that filters 'Region' to 'West', what is the result of the following measure?

Total Sales = SUM(Sales[Amount])

If the 'Sales' table contains:
- West: 100, 200
- East: 300, 400

What is the output of Total Sales when the RLS is applied?

A 300

B 1000

C 700

D 0

💡 Hint

Remember that static RLS filters the data before the measure calculation.

Static RLS filters the 'Sales' table to only include rows where Region = 'West'. The amounts for West are 100 and 200, so the sum is 300.

❓ visualization

intermediate

Visual Impact of Static RLS on a Bar Chart

You have a bar chart showing total sales by region. A static RLS rule restricts data to the 'North' region only.

Which of the following describes the correct visual output?

A The bar chart shows bars for all regions, but only 'North' has a value; others show zero.

B The bar chart is empty with no bars displayed.

C The bar chart shows all regions with their original sales values.

D The bar chart shows bars only for the 'North' region; other regions are not displayed.

💡 Hint

Static RLS filters the data source, so only allowed data is visible in visuals.

Static RLS filters the data before visuals are rendered. Only 'North' region data is available, so only that bar appears.

🧠 Conceptual

advanced

Understanding Static RLS Rule Application

Which statement best describes how static RLS rules are applied in Power BI?

A Static RLS filters data at the data source level before loading into Power BI.

B Static RLS allows users to edit the filter rules directly in the report view.

C Static RLS applies a fixed filter on tables inside Power BI that does not change per user.

D Static RLS filters data dynamically based on user login at query time within Power BI.

💡 Hint

Think about what 'static' means in this context.

Static RLS applies fixed filters defined in Power BI Desktop or service that does not vary by user identity.

❓ data_modeling

advanced

Modeling Static RLS with Role Filters

You want to create a static RLS role that restricts users to see only data where 'Country' = 'USA'. Which of the following DAX filter expressions correctly implements this static RLS rule on the 'Customers' table?

A FILTER(Customers, Customers[Country] = "USA")

B Customers[Country] = "USA"

C Customers[Country] IN {"USA"}

D Customers[Country] <> "USA"

💡 Hint

Static RLS roles use simple filter expressions on columns.

The RLS role filter expression should be a boolean condition on the column, like Customers[Country] = "USA".

🔧 Formula Fix

expert

Debugging Static RLS Not Applying Correctly

A report uses a static RLS role filtering 'Region' = 'South'. However, users assigned to this role see data from all regions.

Which of the following is the most likely cause?

A The RLS role was created but not assigned to any users.

B The filter expression uses incorrect column name 'Regions' instead of 'Region'.

C The report uses DirectQuery mode which disables RLS.

D The measure used ignores filters and uses ALL() function.

💡 Hint

Check role assignments carefully.

If users are not assigned to the RLS role, the filter does not apply and they see all data.

Practice

1. What is the main purpose of Static Row-Level Security (RLS) in Power BI?

easy

A. To restrict data access using fixed filter conditions

B. To dynamically change data access based on user input

C. To create interactive visualizations

D. To improve data refresh speed

Solution

1. Step 1: Understand Static RLS concept

   Static RLS uses fixed filter rules to limit data access for users.

2. Step 2: Compare with other options

   Dynamic changes or visualization improvements are not the purpose of Static RLS.

3. Final Answer:

   To restrict data access using fixed filter conditions -> Option A

4. Quick Check:

   Static RLS = fixed filters [OK]

Hint: Static RLS means fixed filters for data access [OK]

Common Mistakes:

• Confusing static with dynamic RLS
• Thinking RLS improves performance
• Mixing RLS with visualization features

2. Which of the following is the correct syntax to define a static RLS filter on a 'Region' column in Power BI?

easy

A. Region == "North"

B. FILTER(Region, Region = "North")

C. Region = "North"

D. Region IN ("North")

Solution

1. Step 1: Identify correct filter syntax for static RLS

   Static RLS uses simple filter expressions like Column = "Value".

2. Step 2: Evaluate options

   Region = "North" uses correct single equals sign and quotes. FILTER(Region, Region = "North") is a function, not direct filter. Region == "North" uses double equals which is invalid in Power BI filter. Region IN ("North") uses IN syntax which is not supported in static RLS filter expression.

3. Final Answer:

   Region = "North" -> Option C

4. Quick Check:

   Static RLS filter = Column = "Value" [OK]

Hint: Use single equals sign for static RLS filters [OK]

Common Mistakes:

• Using double equals (==) instead of single equals (=)
• Using FILTER function inside static RLS
• Using unsupported IN syntax

3. Given a static RLS rule on the 'Department' column with filter Department = "Sales", what data will a user assigned this role see?

medium

A. Rows where Department is Sales or Marketing

B. Only rows where Department is Sales

C. All rows except those where Department is Sales

D. No rows at all

Solution

1. Step 1: Understand the filter condition

   The filter Department = "Sales" restricts data to only Sales department rows.

2. Step 2: Analyze each option

   Only rows where Department is Sales matches the filter exactly. All rows except those where Department is Sales is the opposite. Rows where Department is Sales or Marketing includes Marketing which is not in the filter. No rows at all means no data, which is incorrect.

3. Final Answer:

   Only rows where Department is Sales -> Option B

4. Quick Check:

   Filter Department = Sales shows only Sales rows [OK]

Hint: Filter equals value means only that value's rows show [OK]

Common Mistakes:

• Assuming filter excludes the value instead of including
• Thinking filter includes multiple values without OR
• Confusing filter with dynamic RLS

4. You created a static RLS rule with filter Region = "East" but users assigned to this role still see all data. What is the most likely cause?

medium

A. Static RLS does not restrict data

B. The filter syntax is incorrect

C. The data model has no Region column

D. The RLS role was not assigned to the users

Solution

1. Step 1: Check role assignment

   Static RLS only restricts data if users are assigned to the role with the filter.

2. Step 2: Evaluate other causes

   Filter syntax is correct, Region column exists, and static RLS does restrict data. So the most likely cause is missing user assignment.

3. Final Answer:

   The RLS role was not assigned to the users -> Option D

4. Quick Check:

   Users must be assigned roles for RLS to apply [OK]

Hint: Assign users to roles to activate RLS filters [OK]

Common Mistakes:

• Assuming filter syntax error without checking assignments
• Thinking static RLS is ineffective
• Ignoring data model columns

5. You want to create static RLS rules to restrict sales data by region: North users see only North region data, South users see only South region data. Which approach is best?

hard

A. Create two roles with filters: Region = "North" and Region = "South", then assign users accordingly

B. Create one role with filter Region IN ("North", "South") and assign all users

C. Create no roles and rely on report filters

D. Create one role with filter Region = USERNAME()

Solution

1. Step 1: Understand requirement for static RLS by region

   Each region needs a separate fixed filter to restrict data accordingly.

2. Step 2: Evaluate options

   Create two roles with filters: Region = "North" and Region = "South", then assign users accordingly creates two roles with fixed filters and assigns users correctly. Create one role with filter Region IN ("North", "South") and assign all users allows all users to see both regions, which is incorrect. Create no roles and rely on report filters does not restrict data. Create one role with filter Region = USERNAME() uses dynamic USERNAME() which is not static RLS.

3. Final Answer:

   Create two roles with filters: Region = "North" and Region = "South", then assign users accordingly -> Option A

4. Quick Check:

   Separate roles with fixed filters for each region [OK]

Hint: Use separate roles with fixed filters for each group [OK]

Common Mistakes:

• Using one role for multiple regions
• Confusing static with dynamic RLS
• Relying on report filters instead of RLS