Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
4 years ago
Solved

Set up Shared dataset permission errors

Hi all,

 

We are rolling out shared datasets within our organisation. All our workspaces are created via the new workspace experience. Workspace 1 contains the dataset and Workspace 2 contains the report. We have published Workspace 2 as a Workspace App in order to share the report to multiple users via AD groups. 

 

We have configured the following permisisions: 

- In tenant settings: Use datasets across workspaces for the entire organization = Enabled

- Workspace A dataset:

[Test1] Direct Access: build permission 

Workspace Access: Viewer 

[Test2] Direct Access: build permission 

Workspace Access: not added

- Workspace B report: viewer 

 

We get below errors: 

"Permission required: you cannot see the content of this report because you do not have permissions to the underlying dataset. Please contact the dataset owner to request access". & 

"Something went wrong Unable to load the model"

 

How do i set this permission correctly so end users doesnt need the contributer role? Currently our endusers has the contributer role because this is the only way for them to see data, but ofcourse this is not the ideal situation.  

 

Thanks.

  • Anonymous's avatar
    Anonymous
    4 years ago

    I've found a solution and that is to implement RLS. 😉 

10 Replies

  • Hey Anonymous,

     

    I have a clarification question - in the APP in workspace 2, do you have permissions for the user in question there?

    • Anonymous's avatar
      Anonymous
      Not applicable

      Hi collinq ,

      Yes. The user has the viewer role in the APP workspace & in workspace 2. If the user goes to ''Apps'' he sees the dashboard, but when he open the app/report he got the error "Something went wrong Unable to load the model"

       

      If I assign him the contributer role in workspace 1 (dataset), the error disappears and he is able to see the data in the app/report, but we don't want to give end-users contributer role. So the issue is that the user CAN see the APP or report in the workspace but is not able to see the data. 

      • collinq's avatar
        collinq
        Super User

        Hey Anonymous ,

         

        I don't see you mentioning it - but are you using RLS?  (Grasping at a straw there.)   Is this Direct Query or Import (or something else)?

         

         

    • Anonymous's avatar
      Anonymous
      Not applicable

      Hi npergand ,

      I've also tested that scenario, 

       

      This is the settings for workspace 1 (dataset)

      the 3rd user has Read, build and reshare access

      and this is the Access settings in the workspace the same users is assigned the viewer role

       

       

      • npergand's avatar
        npergand
        Helper II

        This confuses me, as I haven't been able to reproduce your issue.

        We have the same tenant setting enabled.

        • I created a dataset in workspace A (did not grant the end user X access to it).
        • created a report using the "Power BI datasets" connector and published to workspace B (did not grant the end user X access to the workspace)
        • created an App from workspace B with the report in it. Granted the end user X access to it.

        When end user X gets the App, he received the first error you stated: "you cannot see the content of this report because you do not have permissions to the underlying dataset. Please contact the dataset owner to request access"

        • Went into workspace A and added view permissions to the dataset for end user X

        The report in the app now loades successfully for the end user.

         

        I'm not sure what the difference is. We did not experience the "Something went wrong Unable to load the model" error.

        I don't know if it is worth noting that both workspaces are on our premium capacity.

  • Anonymous's avatar
    Anonymous
    Not applicable

    I've found a solution and that is to implement RLS. 😉