We recently did a poc on Power BI but reach an dangerous limit of RLS feature. As we manage data from 2 organisations, we have 3 kind of user : User with access to org A; User with access to org B; User with access to both; For now, we created a dataset using RLS to filter out the (confidential) data the 2 first set of user can't see... However, these user are the "Power User" of their organisation, and become our main content author. I setup a workgroup including Power User from the 3 groups as they collaborate a lot, I tried the following combinations without success : Every members of the group can Edit Content : Bypass RLS Every members of the group can See content : Can't create new report Every members of the group can See content but is Admin : Bypass RLS For now, we "fixed" this by filtering out the data from the dataset itself and create 3 groups, but it's unmanageable for maintenances ! Will it be possible to include RLS for content author ? I think the ideal scenario should be : Every members of the group can Edit Content but can only see data AFTER RLS is applied ! Thanks !
5 Comments
- fbcideas_migusrNew MemberI have the same problem in a I recent release of some reports and datasets included as part of a workspace. I need an editable workspace because my Power Users will need to connect to online datasets from Power BI Desktop.
- fbcideas_migusrNew MemberI have exactly the same problem. We are a large organization in which Power Users must be able to create reports and dashboards but must also access segregated data. This is impossible to accomplish today. Today the users are either 'Viewers' and the RLS is applied or anything else and RLS is circumvented. It makes no sense to me and I'm amazed that this defect is not given more attention by the developers. Thanks.
- keerthana_rajenNew MemberI have the same problem as well. As a big company, we really need this feature in Power BI as it is crucial to provide edit access to users after applying RLS. We are not able to find a workaround for this and this is a big limitation in Power BI Service today. Hope this idea will be implemented the soonest possible in Power BI. Thanks!
- darren_touseullNew MemberLike others, I am perplexed why there is not an option to "always apply Roles" to a dataset. The only alternative for a shared data source is to use Analysis Services and build the RLS into the cube. This is a huge hole in an otherwise good feature within Power BI.
- fbcideas_migusrNew MemberStatus added:Needs Votes
Recent ideas
Expose workspace creation date (and creator) in the Admin REST API, Scanner API, and Admin portal
Problem There is currently no supported way to retrieve the actual creation date of a Power BI / Fabric workspace. Administrators must rely on audit events (CreateFolder / CreateGroup), which are li...Abdo-Samir45 minutes agoNew MemberNew3Views0likes0CommentsCustom message or contact for RLS Access Denied
When a report uses RLS and a user with access to the app attempts to access it prior to being added to the Security screen, a message directing them to contact the "dataset owner" pops up. The proble...kimco49 minutes agoAdvocate INew423Views7likes2CommentsAllow Custom Sender Identity for Power BI Email Subscriptions
Currently, Power BI email subscriptions do not provide an option to configure or customize the sender identity. For organizations that have specific communication, branding, or email-management requ...Jashwanth_K1 hour agoMicrosoft EmployeeNew56Views24likes1Comment