Forum Discussion
RLS - Unrestricted Access
I have dynamic RLS set up so that our sales reps only see data for accounts that they own (based on account owner name and UserPrincipalName()). The rest of my users need to see ALL data. I have the ...
Hi there
The reason that it is currently not working is because by default if you are not part of any role, then you do not get access to see any data.
The one quick way is if possible is to add an AD Security Group for the other users to an Admin Role, which will allow them to see everything.
If you use the new App Workspaces, you can now add in AD Security Groups, Exchange Groups or Office 365 groups into the App Workspace. And if you make that group an Admin they too should be able to see all the data.
There is also a good blog post by Reza Rad explaining how to create Admin users, but you will still need to have a list of the users who will have access to see all the data: http://radacad.com/dynamic-row-level-security-with-manager-level-access-in-power-bi
The reason that it is currently not working is because by default if you are not part of any role, then you do not get access to see any data.
The one quick way is if possible is to add an AD Security Group for the other users to an Admin Role, which will allow them to see everything.
If you use the new App Workspaces, you can now add in AD Security Groups, Exchange Groups or Office 365 groups into the App Workspace. And if you make that group an Admin they too should be able to see all the data.
There is also a good blog post by Reza Rad explaining how to create Admin users, but you will still need to have a list of the users who will have access to see all the data: http://radacad.com/dynamic-row-level-security-with-manager-level-access-in-power-bi
Thanks for the clarification. Here's the odd thing...Let me know if this is expected.
If I share the report manually with people, they need to be in a security role in able to see any data. Now - this same report in the same workspace is also published as an app...anyone that is accessing via the app instead of via manually sharing can access the data without needing to be part of a security role.
Is this expected?