Share the Fabric Capacity Metrics App with other users e.g. apply RLS

[fb200]

Hi everyone!

I’m trying to share the Fabric Capacity Metrics App with a wider group of users in my organization.

My goal is:

• Users should only see specific capacities or workspaces in the report (e.g. using DAX and RLS).
• They should not receive the Capacity Admin Role

However, I’m not sure whether RLS is supported for this scenario or if there is a recommended workaround (e.g., copying the model, building a custom metrics semantic model, or ....).

My questions:

1. Is it technically possible to apply custom RLS on the Fabric Capacity Metrics semantic model?
2. If not, is there a supported way to allow users to see metrics only for selected capacities without granting the Capacity Admin role?
3. Are there best practices from other users on sharing the Capacity Metric App?

Any insights or experiences would be greatly appreciated!

[suparnababu8 · Accepted solution]

Hi @fb200 

• Is it technically possible to apply custom RLS on the Fabric Capacity Metrics semantic model?
  RLS not supported directlly on the Capacity Metrics App. This capapcioty metric app is designed to show metrics at the capacity level and access is coupled to the Capacity admin role. So, by using DAX filters , it's not possible to appl RLS
  
  
• If not, is there a supported way to allow users to see metrics only for selected capacities without granting the Capacity Admin role?
  Alternative approch is, you can copy underlying dataset means semantic model from the Capaciity metrics app into your  workspace. Once you own the dataset, you can apply RLS roles using DAX filters then publish the custimezed rfeport that have limits to the selected capaciotes and workspaces. 
  
  
• Are there best practices from other users on sharing the Capacity Metric App?
  As a best practise, you can  build filitered reports for each group of users and sharre only those reports rather than trying to enforce RLS on the shared app.

Understand the metrics app compute page - Microsoft Fabric | Microsoft Learn

What is the Microsoft Fabric Capacity Metrics app? - Microsoft Fabric | Microsoft Learn

Hope this helps you

Thank you!!

Did I answer your question? Mark my post as a solution!

Proud to be a Super User!

[v-pgoloju]

Hi @fb200,

Thank you for reaching out to the Microsoft Fabric Forum Community, and special thanks to @lbendlin and @suparnababu8  for prompt and helpful responses.

Just following up to see if the Response provided by community members were helpful in addressing the issue. if the issue still persists Feel free to reach out if you need any further clarification or assistance.

Best regards,
Prasanna Kumar

[fb200]

@v-pgoloju : I shared my solution based on the suggestion from @suparnababu8. Could you please forward it to one of the semantic link labs owerns. Maybe they can add a function to support this manual task.
I believe it would be extremely valuable for users to optimize their solutions, if they had access to their capacity consumption, without being capacity owner.

[lbendlin]

Please keep in mind that the capacity Metrics app also consumes CUs, and lots of it. Don't give users direct access to it.

[fb200]

I use the Power BI Pro License for this workspace (SM + Reports).
Why would you use it with a Fabric Capacity?

[lbendlin]

Licenses have nothing to do with capacity types.

[lbendlin]

The capacity metrics app is based on a Kusto Eventhouse. There's no RLS for that AFAIK.

Best practice is to share screenshots with users. Do not ever give direct access, ever.

[suparnababu8 · Accepted solution]

Hi @fb200 

• Is it technically possible to apply custom RLS on the Fabric Capacity Metrics semantic model?
  RLS not supported directlly on the Capacity Metrics App. This capapcioty metric app is designed to show metrics at the capacity level and access is coupled to the Capacity admin role. So, by using DAX filters , it's not possible to appl RLS
  
  
• If not, is there a supported way to allow users to see metrics only for selected capacities without granting the Capacity Admin role?
  Alternative approch is, you can copy underlying dataset means semantic model from the Capaciity metrics app into your  workspace. Once you own the dataset, you can apply RLS roles using DAX filters then publish the custimezed rfeport that have limits to the selected capaciotes and workspaces. 
  
  
• Are there best practices from other users on sharing the Capacity Metric App?
  As a best practise, you can  build filitered reports for each group of users and sharre only those reports rather than trying to enforce RLS on the shared app.

Understand the metrics app compute page - Microsoft Fabric | Microsoft Learn

What is the Microsoft Fabric Capacity Metrics app? - Microsoft Fabric | Microsoft Learn

Hope this helps you

Thank you!!

Did I answer your question? Mark my post as a solution!

Proud to be a Super User!

[AhmedMamdoh]

Thanks 

[fb200 · Accepted solution]

I ended up using the third option you suggested. As a parameter, I applied the capacity name as a global report‑level filter across all pages and then locked it. For a first attempt, this works well and already gives users a focused view on their own consumption patterns. I hope it will be helpful for optimizing their solutions too.

However, this approach still requires manually rebuilding or adjusting the reports whenever the Metrics App gets updated or reinstalled.
If someone with more advanced semantic‑link‑labs experience has sample code or best practices for automating this workflow, that would be extremely valuable. Ideally, I’d love to automate the cloning, rebinding, and filter injection steps so the restricted‑view reports could be recreated automatically whenever the underlying app changes. 

Any hints or code snippets would be greatly appreciated!