RLS with different client workspaces

[CardaL]

Hi all,

I am quite new to this subject of the service, but trying to figure out whether I could make use of Row Level Security (RLS) for some client dashboards. 

I have a few big datasets in which the data that is being used is stored for all clients. For each client dashboard, we filter all data based upon client name and characteristics and we publish it to the workspace the client has access to. In case of an update or a bugfix, we need to update all dashboards separately and publish them to the workspaces again to have this deployed. I read about RLS and think this can be done much easier in a way. I just do not know (yet) how to configure it correctly.

Furthermore, I read that even though RLS has been configured, users can still access all data behind a certain visual. Since the data for all clients is coming from the same dataset, but clients are definitely not allowed to view each other's data, this might be a blocker for me to make use of RLS. Is there another way to configure this to make sure no data can be viewed or downloaded by others? 

Many thanks in advance! 

[amitchandak]

@CardaL , to access data behind visual, you can control access using Tenant setting under Admin Portal -> export settings

Tenant- Export Permission Setting Part 1: https://www.youtube.com/watch?v=A-_rtK0adf8&list=PLPaNVDMhUXGY-63A0jOksU-DrNI7g2aQF&index=7

Tenant- Export Permission Setting Part 2: https://www.youtube.com/watch?v=6E_EYP37Ijk&list=PLPaNVDMhUXGYo50Ajmr4SgSV9HIQLxc8L&index=37

In the case of RLS, the user should only be able to export data he has access

https://docs.microsoft.com/en-us/power-bi/enterprise/service-admin-rls

How to use Row Level Security (RLS): https://youtu.be/NfdIA0uS6Nk