Row level security - can't get View as other user to work

[ConnieMaldonado]

Hello - I am creating a report in Power BI which uses RLS to limit the view of users when they access the report.

I have created a path statement on the Employee Dim table to set up the hierarchy.

Path = PATH('Employee Dim'[Employee_Number],'Employee Dim'[Primary Manager ID])

In the Modeling section, I created a User and added a filter on the Employee Dim table as follows:

In the service, I added users to the user role and shared the report with them.  

For the users I tested, the view was limited, and each person only saw his/her direct reports.

However, when I use the "View as Roles" functionality in the desktop from the modeling tab and select "Other user", the view is not limited.  I have admin rights on the workspace - is that why the view is not limited?  I'm trying to test the functionality and see what a specific user sees.

When I test from the service using the "Test as Role" from the dataset, it works and the view is limited.  I'd like to know why, though, I can't use the "View as" functionality from the modeling tab in the desktop.

Does anyone know?

Thanks!

[bcdobbs · Accepted solution]

When you use the view as other user in desktop you have to tick the role as well as give the user name. At that point in the life cycle it doesn't know what roles a user belongs to.

In the service you've assigned users (probably via security group) to an RLS role so it knows where they sit.

[ConnieMaldonado]

Wow!  That did it.  Such a simple thing, but I would have never figured it out.  Another question:  Can you add AD groups to the User role?

Thanks so much?

[bcdobbs]

Do you mean can you add Azure AD groups to an RLS role? If so yes, and it's 100% what you should be doing.

[ConnieMaldonado]

Yes, that's what I meant, and thanks again!