Manage access to reports connected to same dataset with common RLS bucket

[AlwaysAGooner]

Hi All,

I possess a primary dashboard that contains several RLS buckets and is utilized by the designated group of users. Currently, there is a requirement to establish a restricted view, allowing access to only one page of the main dashboard, as the audience falls outside the targeted group. I prefer not to hide views and subsequently manage user mapping to accomplish this; hence, I have created an additional report by linking to the dataset of the main dashboard, which alleviates concerns regarding the duplication of any data, measures, or query modifications. At this point, when I grant access by adding names to the dataset's RLS bucket, it enables viewing on both reports: the main dashboard and the restricted one. This situation persists even after I remove users from the audience of the first dashboard using Manage Access.

Need urgent help on this pls.
Thanks a lot.

[FBergamaschi]

The point is that RLS manages access to the model data. So If you have two reports that are fed by the same model, the RLS will be the same, so you have not solved

Option 1 remove the first dashboard, you will republish that later whne this isseu is solved and leave only the restrincted dashboard

Option 2 move the first dashboard to another workspace in whch the users have no access

If this helped, please consider giving kudos and mark as a solution

@mein replies or I'll lose your thread

consider voting this Power BI idea

Francesco Bergamaschi

MBA, M.Eng, M.Econ, Professor of BI

[AlwaysAGooner]

Thanks for responding.
I can't move the main dashboard or it's dataset as it is used by >2000 users. I can move the second one if needed as it is yet to be exposed to any user/group.

[FBergamaschi]

Ok so please remove that and publish it to another workspace

Remove access to the workspace where the first dashboard is to those users that should not see that and give to these people access only to the workspace where the new dashboard will be

PS make sure the people that need to see only stuff from the last dashboard have no way to connect directly to the dataset with power bi desktop or cloud, otherwise they will anyway see potentially what they should not. Only RLS makes sure they cannot access the data they should not see

If this helped, please consider giving kudos and mark as a solution

@me in replies or I'll lose your thread

consider voting this Power BI idea

Francesco Bergamaschi

MBA, M.Eng, M.Econ, Professor of BI

[AlwaysAGooner]

Thanks.
The RLS bucket on the datset to be shared for both the reports. Will this be okay still?

[FBergamaschi]

That means that the security allows the user to see what RLS says. So if they access the model they can see more than you want. So the solution would be to change the RLS for those useres that need to see less, so whatever dashboard they get they see only what they need to see

If you cannot do that and need to keep the same RLS, you can do what I suggested but again this is not security as there is no security on the page level in power bi unfortunately

If this helped, please consider giving kudos and mark as a solution

@me in replies or I'll lose your thread

consider voting this Power BI idea

Francesco Bergamaschi

MBA, M.Eng, M.Econ, Professor of BI

[v-hjannapu]

Hi @AlwaysAGooner,
I hope the information provided above assists you in resolving the issue. If you have any additional questions or concerns, please do not hesitate to contact us. We are here to support you and will be happy to help with any further assistance you may need.

Regards,
Harshitha.