ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam PL-300 All Questions

View all questions & answers for the PL-300 exam
Go to Exam

Exam PL-300 topic 2 question 15 discussion

Actual exam question from Microsoft's PL-300
Question #: 15
Topic #: 2
[All PL-300 Questions]

You have a Microsoft Power BI data model that contains three tables named Orders, Date, and City. There is a one-to-many relationship between Date and
Orders and between City and Orders.
The model contains two row-level security (RLS) roles named Role1 and Role2. Role1 contains the following filter.
City[State Province] = "Kentucky"
Role2 contains the following filter.

Date[Calendar Year] = 2020 -
If a user is a member of both Role1 and Role2, what data will they see in a report that uses the model?

  • A. The user will see data for which the State Province value is Kentucky or where the Calendar Year is 2020.
  • B. The user will receive an error and will not be able to see the data in the report.
  • C. The user will only see data for which the State Province value is Kentucky.
  • D. The user will only see data for which the State Province value is Kentucky and the Calendar Year is 2020.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by Muffinshow at Sept. 2, 2022, 4:30 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Muffinshow
Highly Voted 2 years, 7 months ago
Selected Answer: A
Wrong , correct answer is A
upvoted 149 times
md_sultan
2 years, 4 months ago
I have tried and I was able to see for the year 2020 and area , so D should be correct
upvoted 32 times
Sophieeeeee
10 months ago
I also tried by creating two roles and assigned the contrains to each but the result is A. D works when I put both two constrains under the same role.
upvoted 5 times
VladStan
7 months, 1 week ago
Confirmed - did all the tests and A is the correct answer here. The final result of the report is UNION of what each role can see.
upvoted 1 times
...
...
Mlak_Lou
1 year, 7 months ago
Same i made the test. D is correct !
upvoted 10 times
...
...
NGenov
2 years, 6 months ago
User is limited to only Kentucky AND year 2020. He should not have rights to see other years or areas. Come on guys its simple OR/AND!
upvoted 25 times
cnmc
2 years, 3 months ago
Yes it's simple OR/AND, and you simply don't understand how RLS works. Read Microsoft's doc, and pay attention to this sentence: "Take care: Should a report user map to both roles, they'll see all Payroll table rows." https://learn.microsoft.com/en-us/power-bi/guidance/rls-guidance That means different rules don't "merge" to become the most restrictive of the component rules. In the context of this question, IF I want to restrict this user to see ONLY Kentucky IN the year 2020, then I'd set up a RLS that has both of those conditions...
upvoted 33 times
e31df62
11 months ago
cnmc : Thank YOU! YOU R RIGHT! Straight away lifted from microsft page: "When a report user is assigned to multiple roles, RLS filters become additive. It means report users can see table rows that represent the union of those filters. What's more, in some scenarios it's not possible to guarantee that a report user doesn't see rows in a table. So, unlike permissions applied to SQL Server database objects (and other permission models), the "once denied always denied" principle doesn't apply." Link: https://learn.microsoft.com/en-us/power-bi/guidance/rls-guidance Just do Cntrl+F and search on this page.
upvoted 5 times
...
semauni
2 years ago
I tend to agree with what you're saying, but in that example it's a TRUE() going against a FALSE(). One role is explicitly going against the other role, in this case both roles could supplement each other. Again, I agree that this likely means that it's not only the intersection of the two conditions you'll see, but I'm not 100% sure based on that example.
upvoted 2 times
itenginerd
1 year, 7 months ago
For example, if a user belongs to both the "Sales" and "Marketing" roles, they can see data for both these roles. https://learn.microsoft.com/en-us/power-bi/enterprise/service-admin-rls#faq
upvoted 2 times
...
...
...
NevilleV
2 years, 6 months ago
Which means D is the correct answer
upvoted 8 times
...
...
Mizaan
2 years, 6 months ago
D is correct. Why? Because if they could see Kentucky OR 2020 data then they just have to select Kentucky and they would be able to see data from all years, which would defeat the purpose of RLS
upvoted 24 times
cnmc
2 years, 3 months ago
They would be able to select Kentucky and they would see the KENTUCKY data from all years. They would not be able to see, say New York data or California for years other than 2020
upvoted 8 times
...
Churato
2 years, 6 months ago
"Multiple role mappings can result in unexpected outcomes. When a report user is assigned to multiple roles, RLS filters become ADDITIVE. It means report users can see table rows that represent the UNION of those filters." Source : https://learn.microsoft.com/en-us/power-bi/guidance/rls-guidance
upvoted 46 times
...
...
edbf978
1 year, 3 months ago
This does not seem logical at all and is not the expected result however I have tested in Power BI Desktop and can confirm this is correct. It creates an OR filter condition rather than an AND filter condition when more than one role is applied :(
upvoted 6 times
...
Load full discussion...
...
ThariCD
Highly Voted 2 years, 7 months ago
Selected Answer: A
Answer should be A, from the Microsoft documentation (https://docs.microsoft.com/en-us/power-bi/guidance/rls-guidance): "When a report user is assigned to multiple roles, RLS filters become additive. It means report users can see table rows that represent the union of those filters." This means that you would see all data where either Role1 OR Role2 applies, so the answer is A not D.
upvoted 53 times
rashjan
2 years, 7 months ago
Thank you, that is the right description.
upvoted 1 times
...
olajor
2 years, 7 months ago
Union is everything in both, i.e Role1 and Role2
upvoted 8 times
nucleus21
2 years, 7 months ago
it's A i just recreated the scenario and it shows all the lines for the Role 1 and adds all the lines for the Role 2. so keeps all the lines that meet Role 1 OR Role 2
upvoted 26 times
...
...
Dumi44
2 years, 6 months ago
That means exactly the opposite "can see table rows that represent the union of those filters." Tables that represent the union of the filters, not the union of the rows displayed by each filter
upvoted 12 times
taod
1 year, 8 months ago
I'd say that you are talking about the intersection
upvoted 1 times
...
...
...
Chi3fmhlongo
Most Recent 2 months, 1 week ago
Selected Answer: D
RLS applies an AND condition when multiple roles are assigned, the user will see only the data that meets both conditions.
upvoted 1 times
...
ee0625a
2 months, 2 weeks ago
Selected Answer: D
That means the user will only see data that meets both conditions
upvoted 1 times
...
RRconnect
3 months, 1 week ago
Selected Answer: D
When a user is a member of multiple RLS roles in Power BI, both roles are applied using an AND logic by default. This means the user will see data that satisfies all filters defined by the roles they belong to.
upvoted 1 times
...
SUNNYDEPS
3 months, 1 week ago
Selected Answer: D
The correct content is d as RLS is interpreting as AND operator where both the condition should meet.
upvoted 1 times
...
namuuu
3 months, 1 week ago
Selected Answer: D
In Microsoft Power BI, when a user is a member of multiple row-level security (RLS) roles, the intersection of the filters from all the roles is applied. This means the filters are combined using a logical AND condition. Role1 Filter: City[State Province] = "Kentucky" This restricts the data to rows where the State Province value is "Kentucky." Role2 Filter: Date[Calendar Year] = 2020 This restricts the data to rows where the Calendar Year is 2020.
upvoted 1 times
...
njnaro
3 months, 2 weeks ago
Selected Answer: D
row-level security (RLS) filters are combined using an AND condition when a user belongs to multiple roles. This means that all the filters from all roles must be satisfied for the data to be visible to the user.
upvoted 1 times
...
Odidepse
3 months, 2 weeks ago
Selected Answer: D
You have role1 with applied filters to state of Kentucky and role 2 2020 so uysers will only see Kentucky and year 2020, correct answer is D, dont ignore the filters , I tested it to be sure.
upvoted 1 times
...
PL300ARIF
3 months, 3 weeks ago
Selected Answer: A
A is correct, if there ware only one Rules like City[State Province]= "Kentucky" and Date[Calendar Year]=2020 then option D is correct, since two separate rules are present here so A is correct.
upvoted 2 times
...
PL300ARIF
3 months, 3 weeks ago
Selected Answer: D
In Power BI, when a user is a member of multiple Row-Level Security (RLS) roles, the roles are combined using an AND logic. This means that the filters from both roles are applied simultaneously, restricting the data the user can view to rows that satisfy all the filter conditions.
upvoted 1 times
...
assettemergaliyev
4 months, 1 week ago
Selected Answer: A
https://www.youtube.com/watch?v=0OPcZeLHbfY
upvoted 3 times
...
desibaby09
4 months, 2 weeks ago
Selected Answer: D
"If a user is a member of both Role1 and Role2" IT USES THE WORD AND WHICH WILL ALLOW THEM TO SEE BOTH!
upvoted 1 times
...
olops2002
4 months, 2 weeks ago
Selected Answer: D
D. The user will only see data for which the State Province value is Kentucky and the Calendar Year is 2020. Explanation In Power BI, when a user is assigned to multiple Row-Level Security (RLS) roles, the filters from those roles are combined with an AND condition. This means that all filters must apply simultaneously. Role1 Filter: City[State Province] = "Kentucky" This restricts the data to only rows where the State Province is "Kentucky." Role2 Filter: Date[Calendar Year] = 2020 This restricts the data to only rows where the Calendar Year is 2020. Since the user is a member of both roles, both conditions will apply together. Therefore, the user will see only data that meets both of these criteria: The State Province is Kentucky. The Calendar Year is 2020. Hence, Option D is the correct answer
upvoted 1 times
...
Rio98
4 months, 3 weeks ago
Selected Answer: D
combined with an AND relationship
upvoted 2 times
...
desibaby09
5 months ago
Selected Answer: D
Chat GPT confirmed as well
upvoted 1 times
cleeremind
3 months, 1 week ago
ChatGPT reported correct answer as D for me as well, complete with all its usual seemingly authoritative well-founded reasoning, but I immediately followed up with this prompt: "are you sure about this, there is some debate online about whether the RLS filters intersect to create an OR condition instead of an AND?". At which point it immediately performed a complete 180 and proclaimed A to be correct, complete with a lot of authoritative well founded reasoning :) Caveat emptor. Answer is A.
upvoted 1 times
...
...
jaume
5 months, 1 week ago
Selected Answer: D
From Role 1, user is restricted to data where City[State Province] = "Kentucky" From Role 2, user is restricted to data where Date[CalendarYear] = "2020" It cannot happen user can reach some data in the report out of "Kentucky" State because it's dated "2020" and also cannot see any data for Kentucky from other year than "2020" so I vote here for answer D
upvoted 1 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago