DP-600 Exam - Question 95

Question

You have a semantic model named Model1. Model1 contains five tables that all use Import mode. Model1 contains a dynamic row-level security (RLS) role named HR. The HR role filters employee data so that HR managers only see the data of the department to which they are assigned.

You publish Model1 to a Fabric tenant and configure RLS role membership. You share the model and related reports to users.

An HR manager reports that the data they see in a report is incomplete.

What should you do to validate the data seen by the HR Manager?

Examice · Accepted Answer

To validate the data seen by the HR Manager, you should select Test as role to view the report as the HR manager. This approach allows you to see the report exactly as the HR manager sees it, including the specific data filtered by the dynamic row-level security based on their department assignment. This method helps ensure that the RLS is functioning correctly for the individual HR manager and will reveal any discrepancies in the data they have access to.

cgroven · Answer

Although A basically is true as well, C would be "the most" correct. For instance, if the HR manager is not part of the HR role, doing as described in A would not help you troubleshoot the issue. Also, if the RLS is set up such that different HR managers have different rows visible, you have to select the person. Thus, C is more correct than A.

hmntkmr · Answer

Role name is HR not HR manager so the answer is A.

thisiston · Answer

A. Select Test as role to view the data as the HR role.
This option allows you to impersonate the HR role directly within the environment where the data is published, such as Microsoft Power BI Service. By using the "Test as role" feature, you can see exactly what data the HR role (and thus the HR managers) can access according to the dynamic row-level security settings. This method provides a straightforward way to validate the RLS implementation and ensure it is working as intended.

belha · Answer

you can test roles on report view , so you can see the report as " " 
answer is C

a998450 · Answer

first of all he is able to see data but it is incomplete test as hr role will not help to find issue. when he test role as manager then only he will understand the issue

trietnv · Answer

A.
the question is about how to validate role of a user. https://learn.microsoft.com/en-us/power-bi/enterprise/service-admin-rls#validate-the-roles-within-power-bi-desktop

c2834e0 · Answer

Theres no role called HR MANAGER !!!
Answer is A

Unbounded · Answer

A & C: says "Test" as role. We do not know what conditions we have in Test.
To test these conditions we should select B

e0f0ce6 · Answer

You have to check the problem of a particular user. So we should select "C". Maybe the user isn't part of the role. So "A" would achieve nothing.

stilferx · Answer

IMHO, C) HR Manager is the winner.

No HR role, because each HR assigned to the own department.

2dc6125 · Answer

what is the difference btw see data (A) or see report (C)?

282b85d · Answer

Option C (Select "Test as role" to view the report as the HR manager) is the best approach as it directly validates what the specific HR manager sees under the dynamic RLS conditions, ensuring the completeness and accuracy of the data.
A. Select "Test as role" to view the data as the HR role: This option is useful, but it doesn't specify viewing the report as the specific HR manager, which is crucial to identify user-specific issues.

b6daab0 · Answer

I chose A because only role and not a specific user can be tested using "Test as role".

tawfik21A · Answer

role name is HR

6d1de25 · Answer

C View as report is correct

ab695 · Answer

Correct answer is C., 100%. The key is in the "dynamic" row-level security. 
Selecting A. (HR Role only) would work for a static rule for RLS, but as it is dynamic you will need to input as well the HR manager email and make sure the rule is applied correctly.

6d1de25 · Answer

A is the correct answer

DP-600 Exam - Question 95

Discussion