Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
4 years ago
Solved

After implemented Row level Security what access require to users

After implemented row level security what access/permissions( like work space/member/viewer/contributor)  required to users see their own data . normally user  login their organization email id in po...
Need Help
  • v-easonf-msft's avatar
    v-easonf-msft
    4 years ago

    Hi, Anonymous 

    Each user/group needs to be added to the RLS roles unless they have edit permissions on the dataset.

    1. If the user is assigned as admin/contributor/member of the workspace, then he will have access to all data. RLS does not apply to them.
    2. If the user is assigned the role of "viewer" and is added to the role of rls in PowerBI Service,then he will be restricted by the rules to the data he can access
    3. Other users who have not been assigned any roles have no access to these data

     

    Best Regards,
    Community Support Team _ Eason

Anonymous's avatar
Anonymous
Not applicable
4 years ago

Thanks.

i have applied roles on email - [Emails ] = USERPRINCIPALNAME() and applied proper relationship between roles tables and fact tables  even though user is not able to see his own lcoation as we have given viewer access.  please help me to apply RLS .

 

 

Thanks,

Raghu

Anonymous's avatar
Anonymous
Not applicable
4 years ago

After implementing the RLS in Power BI Desktop, you need to apply this RLS to the dataset in Power Bi Services. Otherwise, the RLS won't work. You can check this by following these steps. For more detailed information check out this documentation Manage RLS

 I hope this will solve your problem.

  • Anonymous's avatar
    Anonymous
    Not applicable
    4 years ago

    Thnaks for replay. can you please confrim each user need to apply this RLS to the dataset in Power Bi Services ?

     

    Thanks,

    Raghu

     

    • v-easonf-msft's avatar
      v-easonf-msft
      Community Support
      4 years ago

      Hi, Anonymous 

      Each user/group needs to be added to the RLS roles unless they have edit permissions on the dataset.

      1. If the user is assigned as admin/contributor/member of the workspace, then he will have access to all data. RLS does not apply to them.
      2. If the user is assigned the role of "viewer" and is added to the role of rls in PowerBI Service,then he will be restricted by the rules to the data he can access
      3. Other users who have not been assigned any roles have no access to these data

       

      Best Regards,
      Community Support Team _ Eason

    • Anonymous's avatar
      Anonymous
      Not applicable
      4 years ago

      Anonymous ,
      RLS doesn't apply for admin, member, or contributor as they have edit access to the dataset but the viewer doesn't so you need to add only those users to whom you want to give specific access. You can add these users to your dataset by either creating a security group( in Azure Directory or Dynamic 365 for that you need to have admin access or you can ask your admin to create those groups and give you access to the group) or add every single user individually. I hope this answers your question.