Forum Discussion

samcarbo's avatar
samcarbo
Frequent Visitor
5 years ago
Solved

Power BI row level security issue

Hi Guys, I recently created some row level security in the Data set. I was asked to create these level security to hide some information to specific user in the company. So I created to different role and assigned the users to these roles. I tried the role by using the function: View as a certain role and everything was working so I wnet forward and let those users know that they can now use Power BI. At my suprise they were able to see the data I was trying to hide from them even if they wer assigned the role I just created. Does anybody know how I can solve that issue ?

 

Thank you,

 

Sam

  • Hi samcarbo ,

     

    In the Power BI service, members of a workspace have access to datasets in the workspace. RLS doesn't restrict this data access. Limitations

     

    In addition, If you have configured a classic workspace so that members have edit permissions, the RLS roles won't be applied to them. Users can see all of the data.

    Read related document:Create classic workspaces in Power BI - Power BI | Microsoft Docs

     

    Further check whether the problem is caused by the above reasons. 


    If the problem is still not resolved, please provide related operation screenshoots.


    Best Regards,
    Henry


    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

9 Replies

  • v-henryk-mstf's avatar
    v-henryk-mstf
    Community Support

    Hi samcarbo ,

     

    In the Power BI service, members of a workspace have access to datasets in the workspace. RLS doesn't restrict this data access. Limitations

     

    In addition, If you have configured a classic workspace so that members have edit permissions, the RLS roles won't be applied to them. Users can see all of the data.

    Read related document:Create classic workspaces in Power BI - Power BI | Microsoft Docs

     

    Further check whether the problem is caused by the above reasons. 


    If the problem is still not resolved, please provide related operation screenshoots.


    Best Regards,
    Henry


    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

  • Migasuke's avatar
    Migasuke
    Memorable Member

    Hi samcarbo ,

    Have you tested the roles before you shared the report? Also, can you share your RLS rules?

    • samcarbo's avatar
      samcarbo
      Frequent Visitor

      This are the RLS rules, i'm just hiding all row from different table. The DAX expression are just FALSE for a bunch of tables. Yes I tried it after saving it and publishing it on the web. On the web version my role I created are there and I am able to assign user to it. When I tried it like that

       

       

      I am not seing any information (so its working). But the user I assigned to this role is able to still see the data even if I had him to the role.

      • Migasuke's avatar
        Migasuke
        Memorable Member

        Hi samcarbo ,

        I have to say it is quite strange. Generally speaking, if you test your role and don't see any data, but the person still sees the data that is something hard to explain.

        Good luck with this, I hope somone will give insight on this topic. I am also quite curious.

  • Please verify if you have added the user in power bi service ->dataset-> security

      • deevaker's avatar
        deevaker
        Resolver I

        what you see when you "view role as" (power bi desktop->model->view as)  that user whom you shared the report