Exam PL-300 All Questions

View all questions & answers for the PL-300 exam

Exam PL-300 topic 2 question 15 discussion

Actual exam question from Microsoft's PL-300

Question #: 15
Topic #: 2

You have a Microsoft Power BI data model that contains three tables named Orders, Date, and City. There is a one-to-many relationship between Date and
Orders and between City and Orders.
The model contains two row-level security (RLS) roles named Role1 and Role2. Role1 contains the following filter.
City[State Province] = "Kentucky"
Role2 contains the following filter.

Date[Calendar Year] = 2020 -
If a user is a member of both Role1 and Role2, what data will they see in a report that uses the model?

A. The user will see data for which the State Province value is Kentucky or where the Calendar Year is 2020.
B. The user will receive an error and will not be able to see the data in the report.
C. The user will only see data for which the State Province value is Kentucky.
D. The user will only see data for which the State Province value is Kentucky and the Calendar Year is 2020.

Show Suggested Answer

Suggested Answer: A 🗳️

by Muffinshow at Sept. 2, 2022, 4:30 p.m.

Comments

Submit Cancel

Muffinshow

Highly Voted 2 years, 9 months ago

Selected Answer: A

Wrong , correct answer is A

upvoted 149 times

md_sultan

2 years, 6 months ago

I have tried and I was able to see for the year 2020 and area , so D should be correct

upvoted 32 times

Sophieeeeee

11 months, 3 weeks ago

I also tried by creating two roles and assigned the contrains to each but the result is A. D works when I put both two constrains under the same role.

upvoted 5 times

VladStan

9 months ago

Confirmed - did all the tests and A is the correct answer here. The final result of the report is UNION of what each role can see.

upvoted 1 times

...

Mlak_Lou

1 year, 9 months ago

Same i made the test. D is correct !

upvoted 10 times

...

NGenov

2 years, 8 months ago

User is limited to only Kentucky AND year 2020. He should not have rights to see other years or areas. Come on guys its simple OR/AND!

upvoted 25 times

cnmc

2 years, 5 months ago

Yes it's simple OR/AND, and you simply don't understand how RLS works. Read Microsoft's doc, and pay attention to this sentence: "Take care: Should a report user map to both roles, they'll see all Payroll table rows." https://learn.microsoft.com/en-us/power-bi/guidance/rls-guidance That means different rules don't "merge" to become the most restrictive of the component rules. In the context of this question, IF I want to restrict this user to see ONLY Kentucky IN the year 2020, then I'd set up a RLS that has both of those conditions...

upvoted 33 times

e31df62

1 year ago

cnmc : Thank YOU! YOU R RIGHT! Straight away lifted from microsft page: "When a report user is assigned to multiple roles, RLS filters become additive. It means report users can see table rows that represent the union of those filters. What's more, in some scenarios it's not possible to guarantee that a report user doesn't see rows in a table. So, unlike permissions applied to SQL Server database objects (and other permission models), the "once denied always denied" principle doesn't apply." Link: https://learn.microsoft.com/en-us/power-bi/guidance/rls-guidance Just do Cntrl+F and search on this page.

upvoted 5 times

...

semauni

2 years, 1 month ago

I tend to agree with what you're saying, but in that example it's a TRUE() going against a FALSE(). One role is explicitly going against the other role, in this case both roles could supplement each other. Again, I agree that this likely means that it's not only the intersection of the two conditions you'll see, but I'm not 100% sure based on that example.

upvoted 2 times

itenginerd

1 year, 8 months ago

For example, if a user belongs to both the "Sales" and "Marketing" roles, they can see data for both these roles. https://learn.microsoft.com/en-us/power-bi/enterprise/service-admin-rls#faq

upvoted 2 times

...

NevilleV

2 years, 8 months ago

Which means D is the correct answer

upvoted 8 times

...

Mizaan

2 years, 7 months ago

D is correct. Why? Because if they could see Kentucky OR 2020 data then they just have to select Kentucky and they would be able to see data from all years, which would defeat the purpose of RLS

upvoted 24 times

cnmc

2 years, 5 months ago

They would be able to select Kentucky and they would see the KENTUCKY data from all years. They would not be able to see, say New York data or California for years other than 2020

upvoted 8 times

...

Churato

2 years, 7 months ago

"Multiple role mappings can result in unexpected outcomes. When a report user is assigned to multiple roles, RLS filters become ADDITIVE. It means report users can see table rows that represent the UNION of those filters." Source : https://learn.microsoft.com/en-us/power-bi/guidance/rls-guidance

upvoted 46 times

...

edbf978

1 year, 5 months ago

This does not seem logical at all and is not the expected result however I have tested in Power BI Desktop and can confirm this is correct. It creates an OR filter condition rather than an AND filter condition when more than one role is applied :(

upvoted 6 times

...

Load full discussion...

...

ThariCD

Highly Voted 2 years, 9 months ago

Selected Answer: A

Answer should be A, from the Microsoft documentation (https://docs.microsoft.com/en-us/power-bi/guidance/rls-guidance): "When a report user is assigned to multiple roles, RLS filters become additive. It means report users can see table rows that represent the union of those filters." This means that you would see all data where either Role1 OR Role2 applies, so the answer is A not D.

upvoted 53 times

rashjan

2 years, 8 months ago

Thank you, that is the right description.

upvoted 1 times

...

olajor

2 years, 8 months ago

Union is everything in both, i.e Role1 and Role2

upvoted 8 times

nucleus21

2 years, 8 months ago

it's A i just recreated the scenario and it shows all the lines for the Role 1 and adds all the lines for the Role 2. so keeps all the lines that meet Role 1 OR Role 2

upvoted 26 times

...

Dumi44

2 years, 8 months ago

That means exactly the opposite "can see table rows that represent the union of those filters." Tables that represent the union of the filters, not the union of the rows displayed by each filter

upvoted 12 times

taod

1 year, 10 months ago

I'd say that you are talking about the intersection

upvoted 1 times

...

Chi3fmhlongo

Most Recent 3 months, 4 weeks ago

Selected Answer: D

RLS applies an AND condition when multiple roles are assigned, the user will see only the data that meets both conditions.

upvoted 1 times

...

ee0625a

4 months, 1 week ago

Selected Answer: D

That means the user will only see data that meets both conditions

upvoted 1 times

...

RRconnect

4 months, 4 weeks ago

Selected Answer: D

When a user is a member of multiple RLS roles in Power BI, both roles are applied using an AND logic by default. This means the user will see data that satisfies all filters defined by the roles they belong to.

upvoted 1 times

...

SUNNYDEPS

5 months ago

Selected Answer: D

The correct content is d as RLS is interpreting as AND operator where both the condition should meet.

upvoted 1 times

...

namuuu

5 months ago

Selected Answer: D

In Microsoft Power BI, when a user is a member of multiple row-level security (RLS) roles, the intersection of the filters from all the roles is applied. This means the filters are combined using a logical AND condition. Role1 Filter: City[State Province] = "Kentucky" This restricts the data to rows where the State Province value is "Kentucky." Role2 Filter: Date[Calendar Year] = 2020 This restricts the data to rows where the Calendar Year is 2020.

upvoted 1 times

...

njnaro

5 months ago

Selected Answer: D

row-level security (RLS) filters are combined using an AND condition when a user belongs to multiple roles. This means that all the filters from all roles must be satisfied for the data to be visible to the user.

upvoted 1 times

...

Odidepse

5 months, 1 week ago

Selected Answer: D

You have role1 with applied filters to state of Kentucky and role 2 2020 so uysers will only see Kentucky and year 2020, correct answer is D, dont ignore the filters , I tested it to be sure.

upvoted 1 times

...

PL300ARIF

5 months, 2 weeks ago

Selected Answer: A

A is correct, if there ware only one Rules like City[State Province]= "Kentucky" and Date[Calendar Year]=2020 then option D is correct, since two separate rules are present here so A is correct.

upvoted 2 times

...

PL300ARIF

5 months, 2 weeks ago

Selected Answer: D

In Power BI, when a user is a member of multiple Row-Level Security (RLS) roles, the roles are combined using an AND logic. This means that the filters from both roles are applied simultaneously, restricting the data the user can view to rows that satisfy all the filter conditions.

upvoted 1 times

...

assettemergaliyev

6 months ago

Selected Answer: A

https://www.youtube.com/watch?v=0OPcZeLHbfY

upvoted 3 times

...

desibaby09

6 months ago

Selected Answer: D

"If a user is a member of both Role1 and Role2" IT USES THE WORD AND WHICH WILL ALLOW THEM TO SEE BOTH!

upvoted 1 times

...

olops2002

6 months ago

Selected Answer: D

D. The user will only see data for which the State Province value is Kentucky and the Calendar Year is 2020. Explanation In Power BI, when a user is assigned to multiple Row-Level Security (RLS) roles, the filters from those roles are combined with an AND condition. This means that all filters must apply simultaneously. Role1 Filter: City[State Province] = "Kentucky" This restricts the data to only rows where the State Province is "Kentucky." Role2 Filter: Date[Calendar Year] = 2020 This restricts the data to only rows where the Calendar Year is 2020. Since the user is a member of both roles, both conditions will apply together. Therefore, the user will see only data that meets both of these criteria: The State Province is Kentucky. The Calendar Year is 2020. Hence, Option D is the correct answer

upvoted 1 times

...

Rio98

6 months, 2 weeks ago

Selected Answer: D

combined with an AND relationship

upvoted 2 times

...

desibaby09

6 months, 3 weeks ago

Selected Answer: D

Chat GPT confirmed as well

upvoted 1 times

cleeremind

5 months ago

ChatGPT reported correct answer as D for me as well, complete with all its usual seemingly authoritative well-founded reasoning, but I immediately followed up with this prompt: "are you sure about this, there is some debate online about whether the RLS filters intersect to create an OR condition instead of an AND?". At which point it immediately performed a complete 180 and proclaimed A to be correct, complete with a lot of authoritative well founded reasoning :) Caveat emptor. Answer is A.

upvoted 1 times

...

jaume

6 months, 4 weeks ago

Selected Answer: D

From Role 1, user is restricted to data where City[State Province] = "Kentucky" From Role 2, user is restricted to data where Date[CalendarYear] = "2020" It cannot happen user can reach some data in the report out of "Kentucky" State because it's dated "2020" and also cannot see any data for Kentucky from other year than "2020" so I vote here for answer D

upvoted 1 times

...

Load full discussion...