RLS Help

[Oluduroj]

Hi,

So I have RLS configured and it works as intended when I add members to my defined role. I currently have my report published to the BI group with 5 team members belonging to the BI group. In my test I tried the UPN for one of the group members and I was able to view the report using his name when testing the role even though he isn't a member of my defined role. Is this meant to happen?

[Eric_Zhang]

@Oluduroj

Based on my test,

1. An admin of a workgroup is not be affected by RLS roles.
2. A member of a workgroup is not be affected by RLS roles, if he is not in any RLS role, namely he is able to view all data when he is not in any role. When he is in some role, he can only view the filtered data.

[Anonymous · Accepted solution]

@Oluduroj

When you say the user was able to view the report, do you mean he was able to view the report under the reports list in the navigation bar? or were you referring to data/rows within the report? RLS would only work on the rows (data), reports would still be viewable. If you want to hide the reports, then you'll have to categorise them into different workspaces or groups. 

And, users mark as admins can see all data within a report regardless of the role, in other words, admin previliges override your role.

Thanks

Kaz

[Oluduroj]

Thanks for the response, I figured as much that admin can see all data, the weird thing though is when i test the role in Power BI desktop and i use my username my report returns blank, but when i test in the online version i am able to see the report.

[ankitpatira]

@Oluduroj When you use UPN you still have to add invidiual members you want to share report with to just one role and then use user security table in your database to do the filtering.