Question

You publish a semantic model to a Power BI workspace and configure a row-level security (RLS) role named 'RegionalManager' that filters sales rows to the user's assigned region. Sarah is a regional manager who should only see her own region's data in the report. You add Sarah to the RLS role and share the report app with her. However, during testing Sarah reports that she can see all regions' data. You confirm the DAX filter on the role is correct. What is the MOST likely cause?

Accepted Answer

Sarah is assigned the Admin, Member, or Contributor role in the workspace, which bypasses RLS.

Answer

RLS roles are only enforced in DirectQuery mode and not in Import mode.

Answer

The RLS role must be re-published every time a new user is added to it.

Answer

Sensitivity labels must be applied to the semantic model before RLS takes effect.