Forum Discussion
Trying to get roles needed for an RLS report using the APi
Hi,
Sorry for the late response. What I ended up doing was a combination of steps: I used the workspace analysis with the dataset to get the full list of roles on the report and who’s assigned to them. Since I already had the user’s email and the AD groups, I just compared them and pulled out the matches.
https://learn.microsoft.com/en-us/rest/api/power-bi/admin/workspace-info-post-workspace-info
https://learn.microsoft.com/en-us/rest/api/power-bi/admin/workspace-info-get-scan-result
You can enumerate RLS roles in a semantic model via DMV queries.
select * from $SYSTEM.TMSCHEMA_ROLES
Thanks for the response, im not familiar with that process since i'm using the powerbi REST api
You can run a DMV query through the REST API.
Datasets - Execute Queries In Group - REST API (Power BI Power BI REST APIs) | Microsoft Learn
thanks but as per the documentation on the api that won't work:
Service Principals aren't supported for datasets with RLS per RLS limitations or datasets with SSO enabled.
im using a service principal.Hi luish_castroc
If you have only a few RLS groups, a practical workaround is to create separate reports for each group and embed them individually, sharing each group's report accordingly, however, if there are many RLS groups, this approach becomes unmanageable and is not a suitable solution and if the feature is really important to you, Please raise a post in ideas forum
Fabric Ideas - Microsoft Fabric Community
to allow the use of service principal with RLS.
If you find this post helpful, please mark it as an "Accept as Solution" and consider giving a KUDOS. Feel free to reach out if you need further assistance.
Thank you
