Forum Discussion
Using RLS with Datasets
- 4 years ago
RLS should be defined in the parent dataset, not in the Live Connection report. If memory serves you can't use the security settings RLS test functionality with Live Connection report, you'll have to test accessing the report with one of the RLS'd users (make sure they're a Viewer in the workspace).
- 4 years ago
Yep, you'll have to test RLS in the workspace, the Live Connection will inherit RLS rules from the parent dataset since they're part of the data model.
https://docs.microsoft.com/en-us/power-bi/enterprise/service-admin-rls
I wrote an entry that hopefully will help you understand how RLS works:
https://www.oliviertravers.com/row-level-security-rls-business-intelligence/
Can you elaborate on what you've done so far and how you're diagnosing that RLS is not working properly?
- dwel01204 years ago
Helper III
Description: We've added 1) the appropriate table and relationship to the dataset 2) roles to the dataset which define the rls 3) linked the dashboard to the dataset 4) defined blank roles in the dashboard. The RLS works in the dataset file itself. The RLS does not work in the dashboard which is linked to the dataset. I have tried making the user we are testing someone with build access to the dataset and testing their permissions in the service. This does give them access to the dashboard.
- otravers4 years ago
Community Champion
This is working as intended, only users with the Viewer workspace role have RLS applied to them. Everyone who is Member or above will see everything.
You can test what RLS does in a report from the Security settings of the dataset and preview the result in reports (but not dashboards, they're not listed there).