Forum Discussion
Row Level Security with different groups
- 4 years ago
Anonymous
If you create another role in PowerBi Desktop, one that does not have any filters, then you can add users to that role and they will be able to see all the data.
In order for RLS to work however, you must assign users to the role in the service. The best way to handle that is with Active Directory security groups. You assign the users to the security group and the security group to the role. That way, if you need to add new users to a role they can just be added to the security group.
You are correct. The model decides how to filter based on the rules of the role the user is in. This does mean that a user that is not in any role will not be able to see any data at all. Just something to keep in mind. Also, the users cannot be members of the workspace in anything other than a reading role or RLS is not applied to them at all.