Forum Discussion
RLS and App
Hi Peter_23
It’s important to understand that there is no direct link between RLS (Row-Level Security) and App Audience settings because one controls row filtering, while the other determines which reports or pages are visible in the app.
RLS is designed to filter data based on user permissions, meaning users will only see the rows they are authorized to view within the report. On the other hand, App Audience settings control which reports or pages users can access in the app.
Both mechanisms operate independently:
- RLS filters the content within the report based on permissions.
- App Audience manages access to specific reports or pages within the app.
To ensure everything is working as expected, here are the checks you should perform:
-
Workspace Access: If the test group has access to the workspace, they will be able to see all reports, regardless of the app audience settings. Make sure the test group does not have direct workspace access, and only access the reports through the app.
-
App Audience Settings: Ensure that the test group is correctly configured in the audience that can only see the "Country" report and not the "State" report. Audiences must be accurately defined to prevent access to restricted content.
-
RLS Validation: Verify that RLS is properly configured on both reports, and that the test group is filtered correctly for each report so that users only see the data they are permitted to view.
If this post helps, then please consider Accepting it as the solution to help the other members find it more quickly
Hi Peter_23
n Power BI Apps, it is not possible to apply RLS in a way that restricts access to specific pages or tabs within a report in the app.
However, within an app, you can use the Audience feature to define which groups can see specific reports or sections of the app. The Audience feature allows you to create different audiences, each with access to different reports or content within the app, but it does not control access to individual pages within a report.
Therefore, the solution would be to create separate reports for each role (e.g., one report for "state" and another for "country") and include them as separate objects within the app. You can then use the audience settings to determine who can see what.
The guide for the audience settings:
https://www.youtube.com/watch?v=nchNa44o2D4
(from minute 3)
If this post helps, then please consider Accepting it as the solution to help the other members find it more quickly
Hi Ritaf1983 yes, It will be two reports (state and country) inside the app. So in the app could be work the RLS together? App level security and RLS security 🤔
Hi Peter_23
There is no connection between RLS and the app audience.
The app audience defines who can see the report or a section of the report.
RLS (Row-Level Security) is used to filter rows.These are two completely separate settings that do not affect each other.
If this post helps, then please consider Accepting it as the solution to help the other members find it more quickly
Thanks Ritaf1983 when you publish the app. is it available to anybody in organization or only to audiences? If it's to anybody, is there a posibility to restrict to audiences?