cancel
Showing results for 
Search instead for 
Did you mean: 

Fabric is Generally Available. Browse Fabric Presentations. Work towards your Fabric certification with the Cloud Skills Challenge.

Reply
Anonymous
Not applicable

RLS with admin access

Hi Team,

need help in understanding how the RLS works with the Admin role.

 

I have 2 reports:

1.  Admin report

2.  Employee Detail report

 

In Admin report,  I have a table visual in which employees are listed.  I have enabled "Conditional formatting" to the empID with an weblink to the 2nd Report (Employee Detail Report).

 

In Employee Detail Report, I have added a RLS "table1[empid] = username()"

 

For a normal user, I give them the link of "Employee Detial Report"

For an admin, I give the link of "Admin Report" from there an admin can search for an empID and go the "Detail Report".

 

So the question is, 

when an user comes from the "Admin Report" to "Detail Report" with search on EmpID(for some other employee), will he be able to view that particular employee    or    Detail report would give him only his information based on the RLS condition? 

 

Note : that this user who comes from "Admin Report" is not given any special permission(contributor etc..) in the "Detail Report".

 

 

2 REPLIES 2
negi007
Community Champion
Community Champion

@Anonymous if you are contributor or has admin access to the worksapce where you have published your dashboard, you will be able to view the entire data irespective of RLS restrictions. However, if you want to test what a particular user can view, you can always test it in the powerbi services like below. You will get this option in powerbi services->dataset->security tab

 

negi007_0-1616156977246.png

 

Please note that the above settings will work once you have implemented RLS in your dataset and has published it to powerbi services.




Did I answer your question? Mark my post as a solution!
Appreciate your Kudos



Proud to be a Super User!


Follow me on linkedin

Anonymous
Not applicable

@negi007  Thanks for the response.  

 

Think that the user who comes from the Admin Report to Detail Report has not given "Contributor" or "Owner" or "Admin" access to the workspace or report.

 

In this case, if I change the RLS condition to below, will the user who has [Admin] value as 1 will be able to view on behalf of a particular employee? 

 

[Empid] = username() || [Admin] = 1 

Helpful resources

Announcements
PBI November 2023 Update Carousel

Power BI Monthly Update - November 2023

Check out the November 2023 Power BI update to learn about new features.

Community News

Fabric Community News unified experience

Read the latest Fabric Community announcements, including updates on Power BI, Synapse, Data Factory and Data Activator.

Power BI Fabric Summit Carousel

The largest Power BI and Fabric virtual conference

130+ sessions, 130+ speakers, Product managers, MVPs, and experts. All about Power BI and Fabric. Attend online or watch the recordings.

Top Solution Authors
Top Kudoed Authors