Forum Discussion
Power BI Dataset RLS - Power BI Report Builder
Hello lherbert501,
When Power BI Report Builder connects to a Power BI semantic model, the dataset query is generated as DAX, but Microsoft documents that the executing user identity isn’t referenced directly inside the DAX text.Instead, the supported approach is:
- Use the built‑in UserID field as the default value for a report parameter
- Bind that parameter in the dataset filter or dataset parameter
- The semantic model then evaluates its existing RLS rules using the passed user context
Microsoft also documents that row‑level security rules including manager or hierarchy logic (for example PATH‑based relationships) are evaluated entirely within the semantic model. Report Builder does not implement or modify hierarchy logic; it only submits queries under the current user context. Once the semantic model applies RLS, all queries from the paginated report including those used for parameters return only the permitted rows.
Thank you.
Hello lherbert501,
Hope everything’s going great with you. Just checking in has the issue been resolved or are you still running into problems? Sharing an update can really help others facing the same thing.
Thank you.
Hi v-ssriganesh
I joined them both up in the semantic model the domain name and log in and it still doesn't pass through unfortunately
Hello lherbert501,
Thank you for confirming.
As per my understanding, even after aligning the identities in the semantic model, Microsoft documents that paginated reports are processed using the SSRS engine, and RLS filtering must be applied within Report Builder for the report queries.To apply RLS to parameter datasets (such as Team dropdowns), you need to create a report parameter using the built‑in User!UserID field and use that parameter in the dataset filter or query.
Reference: Set Up Row-Level Security in Power BI Paginated Reports - Power BI | Microsoft Learn
Hi v-ssriganesh ,
But how does this work when you're using a semantic model in PBIRB?
It's therefore using using dax and the query designer. I understand what you're saying but how can I reference the user id parameter in the dax or query designer?
Also, how can you allow a manager hierarchy to see users data underneath?
Thankyou for responding
Hello lherbert501,
When Power BI Report Builder connects to a Power BI semantic model, the dataset query is generated as DAX, but Microsoft documents that the executing user identity isn’t referenced directly inside the DAX text.Instead, the supported approach is:
- Use the built‑in UserID field as the default value for a report parameter
- Bind that parameter in the dataset filter or dataset parameter
- The semantic model then evaluates its existing RLS rules using the passed user context
Microsoft also documents that row‑level security rules including manager or hierarchy logic (for example PATH‑based relationships) are evaluated entirely within the semantic model. Report Builder does not implement or modify hierarchy logic; it only submits queries under the current user context. Once the semantic model applies RLS, all queries from the paginated report including those used for parameters return only the permitted rows.
Thank you.