Row-level security (RLS) — roles, filters & member assignments
List every RLS role in every model, the DAX filters behind them, and the people / groups assigned to each — across your whole tenant.
What you get
TODO: 2–3 sentences — every role, its DAX filter expression, the principals (users, security groups, service principals) mapped to it.
Run the analysis
TODO: step-by-step — run a scan, open the security view, filter by role / model / principal.
Common workflows
TODO: 2–3 workflows — e.g. “Audit who is in the ‘Finance’ role across every model”, “Find models without RLS that probably need it”, “Spot inconsistent role definitions across models”.
A known blind spot — group membership
TODO: same caveat as access-and-permissions — Measure Killer sees the group, not the individuals. Link to /docs/how-tos/access-and-permissions.
What to do with the findings
TODO: exports, sharing with the access-review owner.
Related
TODO: link to /docs/how-tos/access-and-permissions, /docs/how-tos/tenant-summary.