Forum Discussion
PBI RSL - restrict all except
Hi,
I’m using RSL to restrict users access to specific data but I need the restriction to work by default on anyone who get access to the report and only specific users to get access to all data. I created two roles: General and Admin.
The question is this: How can I setup the General role to apply to all users by default, I don’t want to add them one by one to the role and I don't want to use groups either?
You will NEED to use a user or security group. It will have all possible users, to apply to the default role. This could be more extensive that the list of users that will have access to the report
5 Replies
One option is you need to Embed this report in a web application. Your implementation should be Embedding reports for external customers
https://learn.microsoft.com/en-us/power-bi/developer/embedded/embed-customer-app
With this approach the end users does not need to login to power bi if they want to access your report.
Coming the Row level security
In your web application, you might use javascript or any other language to generate embed token for the user who logged into the web application. While generating the embed token you need to pass the role name and the filter value. It will generate the token as per the values that you pass while sending the request for embed token. It will not verify whether the logged in user is added to the security role in power bi service.
Check out this blog to know more about generating embed token for the reports with RLS
https://learn.microsoft.com/en-us/power-bi/developer/embedded/cloud-rls#dynamic-security
Need a Power BI Consultation? Hire me on Upwork
Connect on LinkedIn
Did I answer your question? Mark my post as a solution! If I helped you, click on the Thumbs Up to give Kudos.
Proud to be a Super User!
You will NEED to use a user or security group. It will have all possible users, to apply to the default role. This could be more extensive that the list of users that will have access to the report
Hi pagen,
May I ask if you have resolved this issue? If so, please mark the helpful reply and accept it as the solution. This will be helpful for other community members who have similar problems to solve it faster.
Thank you.
Hi v-nmadadi-msft,
I didn't find a way to do it without using AD group, but this topic can be closed as I end it up using the group option.
Hi pagen,
We really appreciate your efforts and for letting us know the update on the issue.
Please continue using fabric community forum for your further assistance.
Thank you
