Power BI

Only one relationship between two tables can be active, so the second date relationship is created inactive. Either activate it per measure with USERELATIONSHIP, or load a second, separately named date table so users can slice by each role directly.

A DAX variable is evaluated once, in the context where it is defined, and its result is then a constant. CALCULATE later in the expression modifies the filter context for what follows, but cannot re-evaluate a value that has already been computed.

Power Query's data privacy firewall blocks combinations where a value from one source could leak into a query sent to another. It fires when a query both references other queries and touches a source directly, or when combined sources have incompatible privacy levels.

Publish to Web makes a report anonymously public to anyone with the link. Secure embedding still authenticates each viewer with their own account and licence. Power BI Embedded lets an application authenticate on behalf of users who have no Power BI identity.

Weigh the capability gained against supportability: certified visuals pass a Microsoft code review and avoid external service calls, so they behave in export and subscription scenarios. Most organizations allow certified visuals plus a short vetted list, and block the rest.

Enforce once, as close to the data as the access pattern allows. Warehouse row policies with DirectQuery and single sign-on cover every tool but cost per query; Power BI RLS is faster and self-contained but re-implements the rule for one tool over a cached copy.