Static RLS scope without identity function
"Static RLS scope without identity function" is one of the governance checks Auditabi runs on a Power BI semantic model. Role filters use a fixed value (Region = EMEA) rather than the user identity. It is a low-severity finding: hygiene and maintainability, worth fixing when you next touch the object. Use USERPRINCIPALNAME() with a security mapping table, so one dynamic role covers every user.
What is detected
Role filters use a fixed value (Region = EMEA) rather than the user identity. Every new scope needs a new role, and the mapping lives outside the model.
Why it matters
Hygiene and maintainability. Fix when touching the object.
How to fix it
Use USERPRINCIPALNAME() with a security mapping table, so one dynamic role covers every user.
Does your model fail this check?
Free static audit with the exact objects, no account, nothing stored.