Roll level security (RLS) ia a APP is not working for users with edit permissions in the Workspace

[Melvin]

Hi

We have created a simple report in in Power Bi desktop the data is filterd by a RLS roll. this rol is straicht forward and uses the users UPN name and email a a ilter criteria. when testing the roll everyting works fine. 

Then we publish the report from Power BI desktop to a PowerBi Workspace (Online). when We add users to the roll in the atased based on a AD security group.  the we test th roll and everyting works fine. Then the this workspace is published to a APP. 

within the App RLS is working fine for all users exept for the users whith edit permissions in the app workspace. 

does anyone hase the same issue and found a solution? 

Update 13-12-2017 14:00

Yoe can solve part of this issue by changing the Workspace Privcy to "Members can only view Power Bi Content" . by doing this the RLS filter is working for all members except for admins. 

As this solves the RLS Issue for all members whithe Admin permissions in the Power Bi Workspace or in the coresponding Theams site are stil not filterd by the Roll level Security. 

[v-shex-msft · Accepted solution]

Hi @Melvin,

Yes, current RLS only works for read-only permission members and it also not works for owner and admin.
You can refer to below link to know more about this:

Using RLS with app workspaces in Power BI

If you publish your Power BI Desktop report to an app workspace within the Power BI service, the roles will be applied to read-only members. You will need to indicate that members can only view Power BI content within the app workspace settings.

Warning

If you have configured the app workspace so that members have edit permissions, the RLS roles will not be applied to them. Users will be able to see all of the data.

Row-level security (RLS) with Power BI

Regards,

Xiaoxin Sheng

[Anodyn3]

I wish Microsoft would do something about this sooner rather than later. Every other competitor to the BI platform allows this except for Power BI, which defeats the purpose of a BI platform, if our power users with row security are unable to do their own analysis.

The current workaround is having multiple workspaces ofr the key users but it is not a permanent solution and not feasible for each indivdual user.

[Anodyn3]

I would wish Microsoft will do something about this. Other BI platforms are allowing this feature but not here, which defeats the purpose of having a BI in the first place if the power users are unable to do their own analysis.

The work around is creating dedicated workspace but it's taking up too much effort and not feasbile to do for each specific individual user.

[Melvin]

his is correct but you expect that the Row Level Filter wil bee aplyed to all users when the app is Publiched. whay is the Owner still able tto see all data.