All checks
SecurityGovernanceLow

User / e-mail columns in the model but no security role

"User / e-mail columns in the model but no security role" is one of the governance checks Auditabi runs on a Power BI semantic model. The model has n column(s) that look like user identities (e-mail, owner, user) but defines no row-level security. It is a low-severity finding: hygiene and maintainability, worth fixing when you next touch the object. Confirm the intended audience; if reports are per owner or region, add RLS roles driven by USERPRINCIPALNAME().

What is detected

The model has n column(s) that look like user identities (e-mail, owner, user) but defines no row-level security. Either the data is meant to be open to every reader, or RLS is missing.

Why it matters

Hygiene and maintainability. Fix when touching the object.

How to fix it

Confirm the intended audience; if reports are per owner or region, add RLS roles driven by USERPRINCIPALNAME().

Does your model fail this check?

Free static audit with the exact objects, no account, nothing stored.

Audit a model

More Security checks