Question

Your team uses a Power BI deployment pipeline with Development, Test, and Production stages. A semantic model in Development has three row-level security (RLS) roles defined, each with DAX filter expressions but no members assigned. After deploying to Test, a security administrator manually assigns Azure AD security groups to each role in the Test workspace. The next week you deploy an updated model from Development to Test again. What happens to the RLS role membership assignments in the Test stage after this second deployment?

Accepted Answer

The role definitions (DAX filters) are updated, but the member assignments made in Test are preserved.

Answer

Both the DAX filter expressions and the member assignments are overwritten with the Development values (which have no members).

Answer

The deployment fails because RLS roles already have members assigned in the target stage.

Answer

The member assignments are copied back from Test to Development to keep both stages synchronized.