PL-300 · Question #302
You have the Power BI model shown in the following exhibit. A manager can represent only a single country. You need to use row-level security (RLS) to meet the following requirements: - The managers m
The correct answer is A. Create a single role that filters Country[Manager_Email] by using the USERNAME DAX function. C. For the relationship between Purchase Detail and Purchase, select Apply security filter in both. To minimize roles, dynamic RLS is the correct approach. Option A creates a single role using the DAX expression Country[Manager_Email] = USERNAME(), where USERNAME() returns the UPN (email address) of the signed-in user, matching it against the Manager_Email column automatically
Question
You have the Power BI model shown in the following exhibit. A manager can represent only a single country. You need to use row-level security (RLS) to meet the following requirements:
- The managers must only see the data of their respective country.
- The number of RLS roles must be minimized.
Which two actions should you perform? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
Exhibit
Options
- ACreate a single role that filters Country[Manager_Email] by using the USERNAME DAX function.
- BCreate a single role that filters Country[Manager_Email] by using the USEROBJECTID DAX
- CFor the relationship between Purchase Detail and Purchase, select Apply security filter in both
- DCreate one role for each country.
- EFor the relationship between Purchase and Purchase Detail, change the Cross filter direction to
How the community answered
(34 responses)- A76% (26)
- B3% (1)
- D9% (3)
- E12% (4)
Explanation
To minimize roles, dynamic RLS is the correct approach. Option A creates a single role using the DAX expression Country[Manager_Email] = USERNAME(), where USERNAME() returns the UPN (email address) of the signed-in user, matching it against the Manager_Email column automatically - eliminating the need for one role per country (Option D). Option C is required because the security filter from the Country table must propagate through the relationship to Purchase Detail; enabling 'Apply security filter in both directions' ensures RLS is enforced across that relationship. Option B (USEROBJECTID) returns an Azure AD object ID, not an email address, so it would not match Manager_Email.
Community Discussion
No community discussion yet for this question.