Row Level Security not working when tested by a user

[federica]

I have set up RLS named "USA" based on the country [Country] = USA.

After i publish my dashboard I "view as" the role "USA" and it works fine. 

I assing the user Bob, who is not in my workspace, to this role. Then I "View as Bob" and I see only data from US, so ok.

Unfortunately, when I Bob accesses the app he is able to see all data instead of being limited to just USA.  Is there something I'm missing? 

Thanks, any help much appriciated.

[V-lianl-msft · Accepted solution]

Hi @federica ,

Please check whether the user has edit permission in the workspace. If the user has edit permission, RLS will be invalid.

You can set the user as the role of viewer and try to see if RLS is applied successfully.

https://docs.microsoft.com/en-us/power-bi/collaborate-share/service-new-workspaces#roles-in-the-new-... 

Best Regards,
Liang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[amitchandak]

@federica , refer if these can help for Row Level security
https://community.powerbi.com/t5/MBAS-Gallery/Microsoft-Power-BI-Unleash-row-level-security-patterns...
https://radacad.com/dynamic-row-level-security-with-organizational-hierarchy-power-bi
https://www.blue-granite.com/blog/using-dynamic-row-level-security-with-organizational-hierarchies
https://docs.microsoft.com/en-us/power-bi/service-admin-rls
https://blog.tallan.com/2018/04/10/row-level-security-in-power-bi-part-1-roles-and-users/

[federica]

Hi @amitchandak , I am following exactly the instructions as per the link you shared: https://docs.microsoft.com/en-us/power-bi/service-admin-rls

Even the "view as person" works fine. I really can't find the trick here.