Handling RLS for Contributor/Member Accessed

[JBhaskar]

Hi All, Please help me with below scenerios

Scenario 1: Handling RLS for Contributor/Member Access ?
How does RLS apply to users with Contributor or Member roles in a Power BI workspace? Since these roles have editing permissions, does RLS still restrict their data access?

Scenerio2: RLS for Multiple Dimensions & Hierarchical Access ?
If a user has access to a semantic model, can their access be further segmented by different entities (e.g., Parks, Departments, Regions, etc.)? 
What’s the best way to configure hierarchical security with multiple dimensions in Power BI? (e.g., A manager should see all data for their region, while a staff member sees only their assigned unit).

Would this approach work for Contributors as well, or does their role require a different setup?

Thank you. 

[Anonymous]

Hi @JBhaskar,

I wanted to check if you had the opportunity to review the information provided. Please feel free to contact us if you have any further questions. If my response has addressed your query, please "Accept  as  Solution" and give a 'Kudos' so other members can easily find it.

Thank you,
Pavan.

[Anonymous]

Hi @JBhaskar,

I wanted to follow up since we haven't heard back from you regarding our last response. We hope your issue has been resolved.
If the community member's answer your query, please mark it as "Accept as Solution" and select "Yes" if it was helpful.
If you need any further assistance, feel free to reach out.

Please continue using Microsoft community forum.

Thank you,
Pavan.

[Anonymous]

Hi @JBhaskar,

I wanted to check if you had the opportunity to review the information provided. Please feel free to contact us if you have any further questions. If my response has addressed your query, please "Accept  as  Solution" and give a 'Kudos' so other members can easily find it.

Thank you,
Pavan.

[JBhaskar]

Hi @SamWiseOwl , Thank you for your reply but my query regarding How to handle RLS for Contributor / Member Access role

[Anonymous]

Hi @JBhaskar,

Thank you  for reaching out in Microsoft Community Forum.

Thank you @SamWiseOwl  for the helpful response.

1.RLS is ignored for Contributors/Members in Power BI workspaces.

2.To enforce RLS, Publish the report to an app and Share the app with Contributors/Members as Viewers.

3.When you view the report in the app, RLS will be applied.

Please continue using Microsoft community forum.

If you found this post helpful, please consider marking it as "Accept as Solution" and give it a 'Kudos'. if it was helpful. help other members find it more easily.

Regards,
Pavan.

[SamWiseOwl]

Hi @JBhaskar 

If someone is part of the workspace the RLS is ignored for reports based on that dataset.

Here Delegate11 is a contributer but was assigned RLS Northerner.

PBI ignores this and show all the data:

Regarding managers it depends how the data is set up.

You can create a security table and use that.

UserID Email ManagerId

1        email1 

2        email2     1

3        email 3    1

4        email 4    1

Create a RLS that bases their security based on the email address.

Email = UserPrincipalName()

You could also use it to create a list of the people that belong to that manager.
var managerid = calculate(selectedvalue(table[userid]), table[email] = UserPrincipalName())

return

CalculateTable( Values(table[userid]), table[managerid] = managerid )

You could filter the table to include all employees in that list.