RLS not working on publishing report to the APP

[abdul452]

RLS is working in the workspace locally, but not when published to the App. It's by default showing the stores for all users in the 'Users' table. I want to publish a stores report based on the RLS filter (userprincipalname)

Users and Stores tables are mapped on the Storekey column. Locally, the RLS is applied to the Stores table and I see only stores for a user based on userprincipalname. But when I publish the report to App, I see the stores for all the users in the Users table. RLS isn't being applied in the App

@VahidDM @arvindsingh802 @amitchandak @Greg_Deckler 

[Greg_Deckler]

@abdul452 How are you testing RLS in the App? Are you logging in to Power BI as a user with a specified RLS role?

[abdul452]

@Greg_Deckler 

I’m logging in the app with a guest account. By default, App is showing the store data from all users.

* In my local I don’t have this issue with RLS, in the powerbi desktop. Report only shows the store data that the guest account has access to. 

[Greg_Deckler]

@abdul452 And the guest account is not a member of the workspace and has been assigned the correct RLS role? Remember that workspace members are immune to RLS rules.

[abdul452]

@Greg_Deckler @The guest account is a member of workspace where I published the App. 

How does the guest account access the report, If I don’t add him to the workspace in the first place?

[Greg_Deckler]

@abdul452 You share the report with the guest user. If they are are Member of the workspace, RLS does not apply.

[abdul452]

@Greg_Deckler Please see my responses below,

You share the report with the guest user.

• Guest user means the login details that I use for PowerBI (or) Guest role in the 'view as' tab

If they are members of the workspace, RLS does not apply.

• How can the Guest user view the report if he's not a member of that workspace?

[Greg_Deckler · Accepted solution]

@abdul452 I say again, use the Share button:

Sharing means that you can provide a link or direct access to the report, dashboard, etc. without that user being an Admin, Member, Contributor, etc. to the workspace itself.