what means 'Only rows that match the specified filters are visible to users in this role...?

ovonemty 51 Reputation points
2021-11-16T17:18:02.5+00:00

I have this legacy cube, in roles I see the ReadAll_Admin role (see below), where we have full access to the data:

Screenshot:
149848-image.png

I have a few questions:

  • It says “Only rows that match the specified filters are visible to users in this role”, what if it remains blank like above?! What’s the default “visible” or “not visible”?!
  • I tested the role above and I can read all data, how is it possible?
  • What could be a reasonable case as the above: that is, where you leave all tables blank, and =FALSE() in one?
SQL Server Analysis Services
SQL Server Analysis Services
A Microsoft online analytical data engine used in decision support and business analytics, providing the analytical data for business reports and client applications such as Power BI, Excel, Reporting Services reports, and other data visualization tools.
1,244 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Darren Gosbell 2,371 Reputation points
    2021-11-17T02:39:40.817+00:00

    It says “Only rows that match the specified filters are visible to users in this role”, what if it remains blank like above?! What’s the default “visible” or “not visible”?!

    The default if there is no filter expression is that all rows are visible.

    I tested the role above and I can read all data, how is it possible?

    If you are a server admin RLS filters are not applied. And I think this may also be the case if the permissions for the role are set to Administrator too.

    What could be a reasonable case as the above: that is, where you leave all tables blank, and =FALSE() in one?

    Doing =FALSE() will block all access to the rows in that table and in any tables that are filtered by an active relationship to this table. If you had multiple fact tables in your model (eg. Sales and Inventory) then you you could use a technique like this to allow access to Inventory information, but block access to the Sales data for your warehouse staff.

    0 comments
  2. CarrinWu-MSFT 6,851 Reputation points
    2021-11-17T02:51:41.813+00:00

    Hi @ovonemty ,

    Thanks for your posting.

    It says “Only rows that match the specified filters are visible to users in this role”, what if it remains blank like above?! What’s the default “visible” or “not visible”?!

    It means only data specified in the row filter DAX formula is visible to users. I did not see any DAX filter in your shot screen, so you can see all the data when you browsing tables or measure. I made a test as below. And for more information, please refer to Roles.

    1. When I created a role which named Internet Sales US, and added a DAX filter for Geography table as below:
      149989-1.png
    2. And then use this role to analysis in Excel, only US data can be browsed:
      149967-2.png

    What could be a reasonable case as the above: that is, where you leave all tables blank, and =FALSE() in one?

    May I ask that did you added =FALSE() in DAX Filter? It will returns the logical value FALSE. For more information, please refer to FALSE.

    Best regards,
    Carrin

    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments