Forum Discussion

manan17's avatar
manan17
Regular Visitor
8 years ago
Solved

RLS DAX not working online

Hi, Im trying to setup a simple rls on my data. 
I have many users, which must only see their own data on in the dataset. Each line of data, has an initial row in it. So I want to be able to only show that user, the data where he/she's initial is in it.

So I setup the role as following: 

 So the initial is changed to the email, so I can see if the user logged in, only can see his own data.

And it does work when I try to view as role:

 

 

But when I go online, and login as this user, and try to see the data in the web, it doesnt show. I get a 401, access denied http code. I have no idea how to make this work, please help me.

 

 

 

 

 

  • Anonymous's avatar
    Anonymous
    8 years ago

    HI manan17,

     

    Maybe you can try to create a security group on office tenant, then add users which need to view this report with RLS to this group.

     

    After these steps, you can enter to power bi and assign role to that group.

     

    Row-level security (RLS) with Power BI

    Add members

    You can add a member to the role by typing in the email address, or name, of the user, security group or distribution list you want to add. This member has to be within your organization. You cannot add Groups created within Power BI.

     

    Regards,

    Xiaoxin Sheng

5 Replies

  • Anonymous's avatar
    Anonymous
    Not applicable

    Hi manan17,

     

    Can you confirm you have correctly assign role to him and modify his permission to read? Current RLS not works for dataset owner and admin or other edit permissions, it only works on read permission.

     

    Row-level security (RLS) with Power BI

     

    In addition, if you forget to assign role to him, he also can't view report.

     

    Regards,

    Xiaoxin Sheng

    • manan17's avatar
      manan17
      Regular Visitor

      Hi, how do you add a role to him? Is that needed for every email user, for them to see a rls report?
      It is indeed a read-only user. If I remove that, and grants them rights to edit, then they can see the report, but not only their own data, because rls only works with read-only users? 

      • manan17's avatar
        manan17
        Regular Visitor

        I found it! Thank you very much. But is that needed for every emailadress, or can you make a group somehow? So i dont have to add every single one of them