Forum Discussion
Power BI Desktop Preview features not visible
Hi Anonymous,
The newest Power BI Desktop version is available now, you can download it from here: Microsoft Power BI Desktop .
In this release version, we can use RLS feature, see:
If you have any question, please feel free to ask.
Best Regards,
Qiuyun Yu
It doesn't end! I can create roles in Power BI desktop but it doesn't seem to have any impact in power BI service as the member of a RLS role can still view all data, when I do view as role member it shows me correctly restricted data but when the role member logs in all data is visible. So something somewhere is still broken :(.
Community SupportHi Anonymous,
If you add group users under the role in Power BI Service, the user must have read-only permission. You will need to indicate that members can only view Power BI content within the group settings.
And the dataset owner will see all data in the report.
For more information, please refer to "Using RLS with Groups in Power BI" in this article: Row-level security (RLS) with Power BI (Preview)
Best Regards,
Qiuyun Yu
Hi v-qiuyu-msft,
Thank you for having a look.
I created a content pack for the dataset with RLS and shared it with three users each of which have different role membership. There was a group which had common membership but I ensured that the privacy level is read only and yet the users can view all data. Any other ideas?
Thanks,
Ankit
I have come to assume that RLS works on report level only and any content pack created using the data with RLS has no RLS itself. Can anyone confirm if this is correct?
- v-qiuyu-msft
Hi Anonymous,
Based on my test, if I add those shared user account under the created role, when creating a content pack for the dataset, shared users cann't see all the data after getting this content pack. In your scenario, please double check if those share users are added under the role, and they only have read-only permission in the group. Make sure they are not dataset owner.
Best Regards,
Qiuyun YuHi v-qiuyu-msft,
I did not share my content pack with specific group but rather with individual role members using their email id. so essentially I published my desktop report file to my workspace (this file had the roles defined with RLS). Then using the dataset I added individual users to the role membeship. I then created a content pack and shared that with individual users (Not Groups within PowerBI). These individual users are the same as users with role membership but it seems the RLS isn't working this way.
After checking your last post I created a group and assigned members read only permissions to it and recreated a content pack shared with this group and now RLS works. So finidngs are that RLS only work when shared through a group created within PowerBI. if I share directly it ends up allowing users right to all data.
Thanks for your help.