Question

You publish a semantic model with row-level security to a workspace. You create two static RLS roles: 'EastRegion' (filters Sales[Region] = "East") and 'WestRegion' (filters Sales[Region] = "West"). A regional manager named Priya needs to see data for BOTH the East and West regions. What is the most efficient way to grant Priya this access?

Accepted Answer

Assign Priya as a member of both the 'EastRegion' and 'WestRegion' roles; her visible data will be the union of the two filters.

Answer

Create a new role 'EastWestRegion' with a filter of Sales[Region] = "East" AND Sales[Region] = "West" and assign only that role to Priya.

Answer

Assign Priya to only one role, then grant her Build permission on the model so RLS is bypassed for the second region.

Answer

Give Priya the Admin workspace role so that row-level security filters no longer apply to her.