You have four sales regions. Each region has multiple sales managers.
You implement row-level security (RLS) in a data model. You assign the relevant distribution lists to each role.
You have sales reports that enable analysis by region. The sales managers can view the sales records of their region. The sales managers are prevented from viewing records from other regions.
A sales manager changes to a different region.
You need to ensure that the sales manager can see the correct sales data.
What should you do?
The supported selection is D (Request that the sales manager be added to the correct Azure Active Directory group). The required outcome is to ensure that the sales manager can see the correct sales data. Report filters and hidden visuals are not security controls because users can still query rows available to the semantic model. Row-level security restricts model rows for viewers by applying role filters through active relationships. Role membership belongs in the Power BI service after the role definition is created in the model. In Microsoft's current exam outline, the corresponding objective is 'Implement row-level security roles'. This keeps service access and operational behavior within the scope requested instead of granting or changing unrelated capabilities.
Microsoft Learn reference: https://learn.microsoft.com/en-us/power-bi/guidance/rls-guidance | PL-300 objective: 'Implement row-level security roles' | Study guide: https://learn.microsoft.com/en-us/credentials/certifications/resources/study-guides/pl-300
Currently there are no comments in this discussion, be the first to comment!