Forum Discussion
RLS and App
Hi there, I developed a dashboard with three report (tabs: world, country, state ) and RLS inside one workspace, with the help of power bi forums. Successfully!
In my configuration (RLS), I have three groups: 1.Administrator role, 2 country role, 3 state role.
And now, I need to create an app with the same dashboard and restriction, e.g. Administrator can see all tabs, country role -> country tab; state role -> state tab.
So is this possible to apply the above configuration with RLS activate, the same groups as audiences? Any consideration to take care?
I mean If my user "Bob" with state role rls (state group) , in the app should be one tab which is state report and the same time rls filtering data access to him.
Thanks in advance.
🙂
Hi Peter_23
It’s important to understand that there is no direct link between RLS (Row-Level Security) and App Audience settings because one controls row filtering, while the other determines which reports or pages are visible in the app.
RLS is designed to filter data based on user permissions, meaning users will only see the rows they are authorized to view within the report. On the other hand, App Audience settings control which reports or pages users can access in the app.
Both mechanisms operate independently:
- RLS filters the content within the report based on permissions.
- App Audience manages access to specific reports or pages within the app.
To ensure everything is working as expected, here are the checks you should perform:
-
Workspace Access: If the test group has access to the workspace, they will be able to see all reports, regardless of the app audience settings. Make sure the test group does not have direct workspace access, and only access the reports through the app.
-
App Audience Settings: Ensure that the test group is correctly configured in the audience that can only see the "Country" report and not the "State" report. Audiences must be accurately defined to prevent access to restricted content.
-
RLS Validation: Verify that RLS is properly configured on both reports, and that the test group is filtered correctly for each report so that users only see the data they are permitted to view.
If this post helps, then please consider Accepting it as the solution to help the other members find it more quickly
10 Replies
Hi Peter_23
n Power BI Apps, it is not possible to apply RLS in a way that restricts access to specific pages or tabs within a report in the app.
However, within an app, you can use the Audience feature to define which groups can see specific reports or sections of the app. The Audience feature allows you to create different audiences, each with access to different reports or content within the app, but it does not control access to individual pages within a report.
Therefore, the solution would be to create separate reports for each role (e.g., one report for "state" and another for "country") and include them as separate objects within the app. You can then use the audience settings to determine who can see what.
The guide for the audience settings:
https://www.youtube.com/watch?v=nchNa44o2D4
(from minute 3)
If this post helps, then please consider Accepting it as the solution to help the other members find it more quickly
Hi Peter_23
There is no connection between RLS and the app audience.
The app audience defines who can see the report or a section of the report.
RLS (Row-Level Security) is used to filter rows.These are two completely separate settings that do not affect each other.
If this post helps, then please consider Accepting it as the solution to help the other members find it more quickly
Hi ,
This setup can be configured through Power BI Apps with audiences. Here's how you can do it:
Create Audiences in the app settings:
Audience 1: Administrator.
Audience 2: Country role.
Audience 3: State role.
Did I answer your question? Mark my post as a solution! Appreciate your Kudos !!
Let's Connect on LinkedIn: https://www.linkedin.com/in/anmol-malviya/?originalSubdomain=in
Hi anmolmalviya05 thanks, you suggested me the same groups for both functions?
