Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
4 years ago
Solved

After implemented Row level Security what access require to users

After implemented row level security what access/permissions( like work space/member/viewer/contributor)  required to users see their own data . normally user  login their organization email id in po...
Need Help
  • v-easonf-msft's avatar
    v-easonf-msft
    4 years ago

    Hi, Anonymous 

    Each user/group needs to be added to the RLS roles unless they have edit permissions on the dataset.

    1. If the user is assigned as admin/contributor/member of the workspace, then he will have access to all data. RLS does not apply to them.
    2. If the user is assigned the role of "viewer" and is added to the role of rls in PowerBI Service,then he will be restricted by the rules to the data he can access
    3. Other users who have not been assigned any roles have no access to these data

     

    Best Regards,
    Community Support Team _ Eason

Anonymous's avatar
Anonymous
Not applicable
4 years ago

Thanks.

i have applied roles on email - [Emails ] = USERPRINCIPALNAME() and applied proper relationship between roles tables and fact tables  even though user is not able to see his own lcoation as we have given viewer access.  please help me to apply RLS .

 

 

Thanks,

Raghu

ibarrau's avatar
ibarrau
Super User
4 years ago

Still sounds like modeling issue. How is your roles table? if that is filtering the fact the dimension will never be filtered.

I usually think the role tables will filter a user with a requirement (e.g. location). If you have one requirement you can relate the table with the dimension. Check this post out 
https://blog.ladataweb.com.ar/post/652895563673649152/powerbi-seguridad-de-filas-rls-con-regla

The post shows how the filter will propagate from the roles table to a dimension and then to the fact.

I hope that helps,

  • Anonymous's avatar
    Anonymous
    Not applicable
    4 years ago

    thanks for your support.

    Sales fact table(LCT_NBR) , Bridge table(LCT_NBR)  and Roles Table(LCT_NBR) we have applied relationship with (common key LCT NBR column between tables) as shown below and roles applied on mail column which is contain email id and users will use their email id to login to see own data . kindly correct me .

     

    Thanks,

    Ragu

     

    The above post not able to open and please ping me proper URL .