All checks
SecurityPerformanceMedium

RLS filter applied directly on a fact table

"RLS filter applied directly on a fact table" is one of the performance checks Auditabi runs on a Power BI semantic model. n role filter(s) target a fact table. It is a medium-severity finding: the model still works, but results are wrong in some filter contexts, slow, or fragile under change. Apply the RLS predicate on the dimension (Region, Customer) and let the relationship propagate it to the fact.

What is detected

n role filter(s) target a fact table. The security predicate is evaluated on every fact row for every query; filtering the dimension is orders of magnitude cheaper.

Why it matters

Wrong in some filter contexts, slow, or fragile under change. Fix in the next iteration.

How to fix it

Apply the RLS predicate on the dimension (Region, Customer) and let the relationship propagate it to the fact.

Reference

Microsoft: RLS guidance — filter dimensions, not facts

Does your model fail this check?

Free static audit with the exact objects, no account, nothing stored.

Audit a model

More Security checks