RLS in PowerBI with a powerapps embedded

[dhamijaanurag8]

Hello All, 

My question is:- 

I have a powerBI report with Powerapps embedded in order to edit some figures in powerBI report. I am applying RLS in powerBI in a way like I have a department column and need to provide access to department only Department head. I publish the report and since it has powerapps in it, I have the user A as a contributor in order to edit powerapps but doing so is overriding the RLS feature. Can someone suggest an alternative?

Thanks in advance

[dhamijaanurag8]

Hello @Anonymous, thank you for sharing your thoughts on this. Quick thing, I am down for point 1, but how is that possible? I have my powerapps embedded in PowerBI report and the option to edit is also there and if someone submit the form there is function of PowerBIdataset.refresh() and PowerBIdataset ("WorkspaceID, "Datasetid") in order to triger the update and date the updated in the datasource directly from there. If I am allowing User A to edit the powerapps i.e., making the user co-owner of the app, he needs to have a contirbutor role in POwerBI premium workspace in order to edit that through powerapps in powerBI report. If I assign the user as a "Viewer" he might not be able to edit or access the Powerapps functionality within the powerBI and vice versa will contradict it to RLS law i.e. it is only applicable to Viewers mode.

I hope the explanation makes sense. 
Thanks again

[Anonymous]

Hi, @dhamijaanurag8 

Based on your description, it appears that your problem stems from the permission level assigned to User A (specifically as a Contributor) that overrides the RLS settings. You can try the following to resolve your issue.

1. Review and adjust the permissions to ensure that User A's permissions on the dataset are set to "Read". This allows RLS to be enforced while still allowing them to view reports. To edit PowerApps, consider separating permission levels between Power BI and PowerApps. You can maintain User A's ability to edit PowerApps directly in the PowerApps service without granting them broader permissions in Power BI in lieu of RLS.

2. Use PowerApps to customize permissions. If User A needs to edit PowerApps but should not bypass RLS in Power BI, consider implementing custom logic in PowerApp to handle editing permissions. This way, you can control the access and editing capabilities of the application itself based on user roles or other conditions, without affecting the RLS in Power BI.

Official document: Embed a new Power App in a Power BI Report. - Power BI | Microsoft Learn

Best Regards,
Yang
Community Support Team

If there is any post helps, then please consider Accept it as the solution to help the other members find it more quickly.
If I misunderstand your needs or you still have problems on it, please feel free to let us know. Thanks a lot!

How to get your questions answered quickly --  How to provide sample data in the Power BI Forum