Forum Discussion

MJG2112's avatar
MJG2112
Advocate II
4 months ago
Solved

How Can I Access the RLS Data in a Semantic Model and Report on it?

I want to produce a report showing the RLS roles and the users assigned to them for all the reports in our workspace.  How can I access this data and report on it?

  • How about two easy DAX queries?

     

    EVALUATE
        INFO.ROLES()
    EVALUATE
        INFO.ROLEMEMBERSHIPS()
     
    That can be run against the semantic models in your workspace, from any place that can run DAX.

8 Replies

    • MJG2112's avatar
      MJG2112
      Advocate II

      Thanks, but this looks to be way more than I actually need.

  • You can also use standard DMV queries to get that meta data.

    • MJG2112's avatar
      MJG2112
      Advocate II

      My reading has highlighted that DMV alone is insufficient for my use case.  It will only give me the RLS roles and DAX filters.  I would need to use APIs to get the user associated with those roles.  A different option that’s been suggested to maintain a governance SharePoint file for the users, but this seems counterintuitive.  In order to build that I need to examine every role in every report to see who the users are, which is the problem I’m trying to solve!

      • lbendlin's avatar
        lbendlin
        Super User
        I would need to use APIs to get the user associated with those roles

         

        Is that not viable for you?  Are you looking for a ready-made auditing solution? If this is important to you please consider voting for an existing idea or raising a new one at https://ideas.fabric.microsoft.com