exam questions

Exam PL-300 All Questions

View all questions & answers for the PL-300 exam

Exam PL-300 topic 2 question 15 discussion

Actual exam question from Microsoft's PL-300
Question #: 15
Topic #: 2
[All PL-300 Questions]

You have a Microsoft Power BI data model that contains three tables named Orders, Date, and City. There is a one-to-many relationship between Date and
Orders and between City and Orders.
The model contains two row-level security (RLS) roles named Role1 and Role2. Role1 contains the following filter.
City[State Province] = "Kentucky"
Role2 contains the following filter.

Date[Calendar Year] = 2020 -
If a user is a member of both Role1 and Role2, what data will they see in a report that uses the model?

  • A. The user will see data for which the State Province value is Kentucky or where the Calendar Year is 2020.
  • B. The user will receive an error and will not be able to see the data in the report.
  • C. The user will only see data for which the State Province value is Kentucky.
  • D. The user will only see data for which the State Province value is Kentucky and the Calendar Year is 2020.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Muffinshow
Highly Voted 2 years, 3 months ago
Selected Answer: A
Wrong , correct answer is A
upvoted 144 times
md_sultan
1 year, 12 months ago
I have tried and I was able to see for the year 2020 and area , so D should be correct
upvoted 29 times
Sophieeeeee
5 months, 2 weeks ago
I also tried by creating two roles and assigned the contrains to each but the result is A. D works when I put both two constrains under the same role.
upvoted 3 times
VladStan
2 months, 3 weeks ago
Confirmed - did all the tests and A is the correct answer here. The final result of the report is UNION of what each role can see.
upvoted 1 times
...
...
Mlak_Lou
1 year, 3 months ago
Same i made the test. D is correct !
upvoted 10 times
...
...
NGenov
2 years, 2 months ago
User is limited to only Kentucky AND year 2020. He should not have rights to see other years or areas. Come on guys its simple OR/AND!
upvoted 25 times
cnmc
1 year, 11 months ago
Yes it's simple OR/AND, and you simply don't understand how RLS works. Read Microsoft's doc, and pay attention to this sentence: "Take care: Should a report user map to both roles, they'll see all Payroll table rows." https://learn.microsoft.com/en-us/power-bi/guidance/rls-guidance That means different rules don't "merge" to become the most restrictive of the component rules. In the context of this question, IF I want to restrict this user to see ONLY Kentucky IN the year 2020, then I'd set up a RLS that has both of those conditions...
upvoted 31 times
e31df62
6 months, 2 weeks ago
cnmc : Thank YOU! YOU R RIGHT! Straight away lifted from microsft page: "When a report user is assigned to multiple roles, RLS filters become additive. It means report users can see table rows that represent the union of those filters. What's more, in some scenarios it's not possible to guarantee that a report user doesn't see rows in a table. So, unlike permissions applied to SQL Server database objects (and other permission models), the "once denied always denied" principle doesn't apply." Link: https://learn.microsoft.com/en-us/power-bi/guidance/rls-guidance Just do Cntrl+F and search on this page.
upvoted 4 times
...
semauni
1 year, 7 months ago
I tend to agree with what you're saying, but in that example it's a TRUE() going against a FALSE(). One role is explicitly going against the other role, in this case both roles could supplement each other. Again, I agree that this likely means that it's not only the intersection of the two conditions you'll see, but I'm not 100% sure based on that example.
upvoted 2 times
itenginerd
1 year, 2 months ago
For example, if a user belongs to both the "Sales" and "Marketing" roles, they can see data for both these roles. https://learn.microsoft.com/en-us/power-bi/enterprise/service-admin-rls#faq
upvoted 2 times
...
...
...
NevilleV
2 years, 1 month ago
Which means D is the correct answer
upvoted 8 times
...
...
Mizaan
2 years, 1 month ago
D is correct. Why? Because if they could see Kentucky OR 2020 data then they just have to select Kentucky and they would be able to see data from all years, which would defeat the purpose of RLS
upvoted 24 times
cnmc
1 year, 11 months ago
They would be able to select Kentucky and they would see the KENTUCKY data from all years. They would not be able to see, say New York data or California for years other than 2020
upvoted 8 times
...
Churato
2 years, 1 month ago
"Multiple role mappings can result in unexpected outcomes. When a report user is assigned to multiple roles, RLS filters become ADDITIVE. It means report users can see table rows that represent the UNION of those filters." Source : https://learn.microsoft.com/en-us/power-bi/guidance/rls-guidance
upvoted 45 times
...
...
edbf978
11 months ago
This does not seem logical at all and is not the expected result however I have tested in Power BI Desktop and can confirm this is correct. It creates an OR filter condition rather than an AND filter condition when more than one role is applied :(
upvoted 5 times
...
...
ThariCD
Highly Voted 2 years, 3 months ago
Selected Answer: A
Answer should be A, from the Microsoft documentation (https://docs.microsoft.com/en-us/power-bi/guidance/rls-guidance): "When a report user is assigned to multiple roles, RLS filters become additive. It means report users can see table rows that represent the union of those filters." This means that you would see all data where either Role1 OR Role2 applies, so the answer is A not D.
upvoted 51 times
rashjan
2 years, 2 months ago
Thank you, that is the right description.
upvoted 1 times
...
olajor
2 years, 2 months ago
Union is everything in both, i.e Role1 and Role2
upvoted 8 times
nucleus21
2 years, 2 months ago
it's A i just recreated the scenario and it shows all the lines for the Role 1 and adds all the lines for the Role 2. so keeps all the lines that meet Role 1 OR Role 2
upvoted 26 times
...
...
Dumi44
2 years, 2 months ago
That means exactly the opposite "can see table rows that represent the union of those filters." Tables that represent the union of the filters, not the union of the rows displayed by each filter
upvoted 12 times
taod
1 year, 3 months ago
I'd say that you are talking about the intersection
upvoted 1 times
...
...
...
desibaby09
Most Recent 22 hours, 9 minutes ago
Selected Answer: D
"If a user is a member of both Role1 and Role2" IT USES THE WORD AND WHICH WILL ALLOW THEM TO SEE BOTH!
upvoted 1 times
...
olops2002
1 day, 13 hours ago
Selected Answer: D
D. The user will only see data for which the State Province value is Kentucky and the Calendar Year is 2020. Explanation In Power BI, when a user is assigned to multiple Row-Level Security (RLS) roles, the filters from those roles are combined with an AND condition. This means that all filters must apply simultaneously. Role1 Filter: City[State Province] = "Kentucky" This restricts the data to only rows where the State Province is "Kentucky." Role2 Filter: Date[Calendar Year] = 2020 This restricts the data to only rows where the Calendar Year is 2020. Since the user is a member of both roles, both conditions will apply together. Therefore, the user will see only data that meets both of these criteria: The State Province is Kentucky. The Calendar Year is 2020. Hence, Option D is the correct answer
upvoted 1 times
...
Rio98
1 week, 6 days ago
Selected Answer: D
combined with an AND relationship
upvoted 1 times
...
desibaby09
2 weeks, 1 day ago
Selected Answer: D
Chat GPT confirmed as well
upvoted 1 times
...
jaume
3 weeks, 3 days ago
Selected Answer: D
From Role 1, user is restricted to data where City[State Province] = "Kentucky" From Role 2, user is restricted to data where Date[CalendarYear] = "2020" It cannot happen user can reach some data in the report out of "Kentucky" State because it's dated "2020" and also cannot see any data for Kentucky from other year than "2020" so I vote here for answer D
upvoted 1 times
...
VladAbz
1 month, 2 weeks ago
If you have selected A: What if a record belongs to Kentucky but other province records are present in 2020. Creates ambiguity right? I think D should be correct.
upvoted 1 times
...
ae8a90c
1 month, 3 weeks ago
Selected Answer: A
Option A
upvoted 1 times
...
ae8a90c
1 month, 3 weeks ago
Selected Answer: D
option D is correct based on the this link
upvoted 1 times
ae8a90c
1 month, 3 weeks ago
sorry I meant A so sorry
upvoted 1 times
...
...
Arth_1111
3 months ago
Selected Answer: D
its simple, Rule1 and Rule2 applied meaning, Rule1 AND Rule2. D is the correct answer
upvoted 1 times
...
rcaliandro
3 months, 3 weeks ago
Selected Answer: D
Of course D- The user will only see data for which the State Province value is Kentucky AND the Calendar Year is 2020
upvoted 1 times
rcaliandro
3 months, 3 weeks ago
Sorry, I made a mistake! I tested it and it is A because I created two roles; I am member of both of them and it shows data from Role1 OR Role2.
upvoted 1 times
...
...
Endeetheanalyst
3 months, 3 weeks ago
D is correct. Additive means AND.
upvoted 2 times
...
21studybuddy_
4 months ago
I think in a nutshell, at any point in time user can view the report as SINGLE role. Hence if the user viewing as ROLE1 then City rule would apply, otherwise if the user viewing as ROLE2 year rule would apply. hence the answer is A (which mean the user has option to view as both roles independently).
upvoted 1 times
...
NaudeDucon
4 months, 2 weeks ago
Selected Answer: A
The right answer is A. the user will see RLS 1 or RLS 2. It's a little confusing for some people as they might understand the statement as: RLS 1 AND (not RLS 2) and vice versa. However, "OR" here is like logical operators. They can see, only rows belong to RLS1, only rows belong to RLS 2 and their intersect (both RLS1 & RLS2). In other word, in this case, users can see all [State Province] in 2020, as well as Kentucky through out all [Calendar Year].
upvoted 2 times
...
Kiran37
4 months, 3 weeks ago
correct answer
upvoted 1 times
...
agelee
4 months, 4 weeks ago
https://learn.microsoft.com/en-us/power-bi/guidance/rls-guidance
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago