Forum Discussion

sarada's avatar
sarada
Frequent Visitor
2 years ago

That is strange!! 
Try to use script to add the AD group to RLS. here is powershell script you can use to update it.

$ReportServerUri = "https://<server_name>/PBIReports
#API to get roles and role assignments
$RoleAssignmentsPath = $ReportServerUri + "/api/v2.0/PowerBIReports(Path='<ReportPath>')/DataModelRoleAssignments"
$RolesPath = $ReportServerUri + "/api/v2.0/PowerBIReports(Path='<ReportPath>')/DataModelRoles"

#call API - row level security
$RoleAssignments = Invoke-RestMethod -Uri $RoleAssignmentsPath -ContentType "application/json" -UseDefaultCredentials -Method Get
#call API - RLS role
$Roles = Invoke-RestMethod -Uri $RolesPath -ContentType "application/json" -UseDefaultCredentials -Method Get

#Get roleId 
$RoleId = $Roles.value[0].ModelRoleId

$NewRoleAssignments = @( [pscustomobject]@{GroupUserName='<ADGroupName>';DataModelRoles=@($RoleId)} )
$RoleAssignmentsResult = $RoleAssignments.value + $NewRoleAssignments 
$RoleAssignmentsjson = $RoleAssignmentsResult | ConvertTo-Json
 
Invoke-RestMethod -Uri $RoleAssignmentsPath  -ContentType "application/json" -Body $RoleAssignmentsjson -UseDefaultCredentials -Method Put
 
note that in above script if your report is in root folder of PBIRS portal then  <ReportPath>  is /report_name
hope this fix your issue!