PBI RSL - restrict all except

[pagen]

Hi,

I’m using RSL to restrict users access to specific data but I need the restriction to work by default on anyone who get access to the report and only specific users to get access to all data. I created two roles: General and Admin.

The question is this: How can I setup the General role to apply to all users by default, I don’t want to add them one by one to the role and I don't want to use groups either?

[v-nmadadi-msft]

Hi @pagen,

May I ask if you have resolved this issue? If so, please mark the helpful reply and accept it as the solution. This will be helpful for other community members who have similar problems to solve it faster.

Thank you.

[pagen]

Hi @v-nmadadi-msft,

I didn't find a way to do it without using AD group, but this topic can be closed as I end it up using the group option.

[v-nmadadi-msft]

Hi @pagen,

We really appreciate your efforts and for letting us know the update on the issue.

Please continue using fabric community forum for your further assistance.
Thank you

[Deku · Accepted solution]

You will NEED to use a user or security group. It will have all possible users, to apply to the default role. This could be more extensive that the list of users that will have access to the report

[tharunkumarRTK]

@pagen 

One option is you need to Embed this report in a web application. Your implementation should be Embedding reports for external customers 

https://learn.microsoft.com/en-us/power-bi/developer/embedded/embed-customer-app

With this approach the end users does not need to login to power bi if they want to access your report. 

Coming the Row level security 

In your web application, you might use javascript or any other language to generate embed token for the user who logged into the web application. While generating the embed token you need to pass the role name and the filter value. It will generate the token as per the values that you pass while sending the request for embed token. It will not verify whether the logged in user is added to the security role in power bi service. 

Check out this blog to know more about generating embed token for the reports with RLS 

https://learn.microsoft.com/en-us/power-bi/developer/embedded/cloud-rls#dynamic-security

Need a Power BI Consultation? Hire me on Upwork

Connect on LinkedIn

Did I answer your question? Mark my post as a solution!
If I helped you, click on the Thumbs Up to give Kudos. Proud to be a Super User!