Forum Discussion
RLS - All users or nothing?
Hello Data Enthusiasts,
Question about PBI RLS.
I created a new role (limited view of dataset) thinking that I can just add 50 users into it, put them into their own audience and that would be OK. Then I test, those not in the role now have 'access denied' and cannot see what they once saw before RLS, which was everything across ALL reports using the same data model.
So, It appears that once you activate RLS on the data model you have to place ALL USERS into a role, so I would have to create an 'ALL Access' group as well. This obviously is slight inconvenience.
Is this really what needs to be done? or am I missing something?
I assumed those not in RLS would default to being able to see ALL.
Would a seperate data model be better?
Thanks!
As you mentioned, you could create a role that doesn't apply any restrictions, effectively giving users in this role access to all the data. You can use a rule in the role with a formula that always returns TRUE, like TRUE(), which does not filter any data.
5 Replies
As you mentioned, you could create a role that doesn't apply any restrictions, effectively giving users in this role access to all the data. You can use a rule in the role with a formula that always returns TRUE, like TRUE(), which does not filter any data.
AmiraBedh Thanks for the reply!
How does this work with the PBI Request email?
When granting access do you have to specify a role as well as an audience (as part the process) or do you have to grant access to the audience then assign the role seperately (as an extra step outside of the process)?Now I am a little bit lost. How ware you configuring your RLS ?
