Security RLS and Right Create report for advanced users

Hi  Cobra77 

You can use dynamic RLS to achieve your needs ,but this should be distinguished according to the type of workspaces.

(1)If you publish your Power BI Desktop report to a new workspace experience in the Power BI service, the RLS roles are applied to members who are assigned to the Viewer role in the workspace. Even if Viewers are given Build permissions to the dataset, RLS still applies.

In this case, users with editing rights can select the dataset that has been shared when creating the report . They can only see the data belonging to their department .

(2) If you have configured a classic workspace so that members have edit permissions, the RLS roles won't be applied to them. Users can see all of the data. Because the Member with edit permissions in classic workspace is the same with Member in new workspace . In new workspace ,the role for Member can see all the data from dataset .

So you need to be able to distinguish the role of different roles in different workspaces .

More info about roles in workspace can refer to the link :

https://docs.microsoft.com/en-us/power-bi/collaborate-share/service-new-workspaces#roles-in-the-new-workspaces

Best Regards

Community Support Team _ Ailsa Tao

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Hi Anonymous 

I removed the viewer rights on the workspace and put the reader and build rights on the dataset and it looks good.

Thanks