How to audit RLS (DMVs) via XMLA in Fabric/Power BI without being the "Dataset Owner"?

Hi Anonymous ,

Thanks for reaching out to Microsoft Fabric Community.

The behavior you are seeing is expected. DMV queries such as $SYSTEM.TMSCHEMA_ROLES require Analysis Services database admin permissions because they expose internal model metadata, including RLS definitions.

Although Workspace Admin, Member, and Contributor roles normally map to database admin permissions for semantic models, this behavior changes if the tenant setting “Block republish and disable package refresh” is enabled. When that setting is turned on, only the semantic model owner is treated as database admin for XMLA discovery and metadata access. Non-owners, even if they are Workspace Admins, are treated as database readers.

Reference: Semantic model connectivity and management with the XMLA endpoint in Power BI - Microsoft Fabric | Microsoft Learn

If the setting is disabled, Workspace Admins should be able to query these DMVs without taking over the model.

You may want to confirm the status of the tenant setting with your Power BI or Fabric administrator, as that will determine the expected behavior in this case.

Hope this helps. Please reach out for further assistance.
Thank you.