topic Re: Row Level Security (RLS) on datasets in Developer

Row Level Security (RLS) on datasets

SPradeep — Fri, 02 Apr 2021 13:29:48 GMT

Hi team,

I am in need of guidance relating a scenario we have in one of our recent execution.

We have dynamic RLS implemented in Power BI datasets (models basically) and hosted in PBI Service. Now within the organisation there exits two levels of user groups,

Super Users (could be web authors or someone who connects the published PBI Service dataset from Desktop application) who will consume these datasets to prepare reports. The authoring and downloading of the .pbix would not be restricted to these users.
Viewers who would consume reports developed by these Super Users or Authors. The authoring and downloading of the .pbix would be restricted to these users.

We have user information as part of the dataset to lookup and filter only data relating to them, this seems perfectly all right for Viewer audience. But for the intermediate Super User (author basically) who connects to these datasets either by downloading raw .pbix from the PBI Service or use web capability to author a report will still have access to all information available as part of the extract. How can this restrictions maintained even for these Super Users?

Please let me know if I miss something and any directions on this would really help.

Thanks in advance.

Pradeep

Re: Row Level Security (RLS) on datasets

v-lionel-msft — Mon, 05 Apr 2021 03:03:24 GMT

Hi @SPradeep ,

In the workspace of PBI Service, RLS can not take effect on roleswith editing permission (Admin, member, contributor) .

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Re: Row Level Security (RLS) on datasets

Anonymous — Tue, 06 Apr 2021 05:57:42 GMT

Thank you @v-lionel-msft , I understand RLS is only applicable for viewers role.

But here is a spcecial requirement where user needs to use shared dataset to build report and re-publish it,

but they should be able to see their own data and not the complete data from shared datasource.

Is there any way to achieve this requirement ?

Best Regards,

Jyoti Pawar

Re: Row Level Security (RLS) on datasets

v-lionel-msft — Thu, 08 Apr 2021 08:50:53 GMT

Hi @Anonymous ,

Unfortunately, the current version does not support users to have both ‘edit permission’ and ‘RLS’ in the workspace.

Therefore, for data security, it is necessary to clearly distinguish what each user should do. Things like creating and publishing should be left to the report developer rather than the viewer.

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.