Security roles that filter only part of the facts
"Security roles that filter only part of the facts" is one of the governance checks Auditabi runs on a Power BI semantic model. n role(s) filter some tables but leave at least one fact table unfiltered. It is a medium-severity finding: the model still works, but results are wrong in some filter contexts, slow, or fragile under change. Filter every fact through the secured dimension, or make the exception explicit and documented.
What is detected
n role(s) filter some tables but leave at least one fact table unfiltered. A user in that role sees restricted rows in one visual and everything in another, which reads as a data leak.
Why it matters
Wrong in some filter contexts, slow, or fragile under change. Fix in the next iteration.
How to fix it
Filter every fact through the secured dimension, or make the exception explicit and documented.
Does your model fail this check?
Free static audit with the exact objects, no account, nothing stored.