Forum Discussion
Apply Data Restrictions for building reports on Semantic Model
Hi Prajit0710,
Thank you for reaching out to the Microsoft fabric community forum.Also, a big thank you to Akash_Varuna and Deku for their valuable insights. To summarize and provide the best governance approach, here’s the recommended solution to allow users to develop reports while ensuring RLS is applied:
Use a Separate Report Workspace.- Keep the Semantic Model in a Secured Workspace by applying RLS to restrict data access and assigning the Viewer role to report builders in this workspace to ensure RLS is enforced.
- Create a Separate Workspace for Reports by assigning Member or Contributor roles to users in this workspace (not in the model workspace) so they can connect to the semantic model while still being restricted by RLS.
- Grant "Build" Permission on the Dataset so that users with Viewer and Build permissions can create reports without bypassing RLS and connect via Power BI Desktop (Live Connection) or Power BI Service to build reports securely.
If this information is helpful, please Accept it as a solution and give a "kudos" to assist other community members in resolving similar issues more efficiently.
Thank you.
Super UserHi Prajit0710 To do this publish the semantic model with RLS applied and then publish to Power BI Service. Assign users Viewer access instead of Contributor, ensuring they use the dataset for reporting while adhering to RLS restrictions. Alternatively, create a Power BI App with the dataset and share it with Viewer permissions.
Hi Akash_Varuna, We have implemented the solution which you have mentioned above. The users are able to see the data with RLS restrictions in the app. But is there a way to develop reports with the data restrictions applied.
We have developed a model which is the generalized solution in our org which other teams are able consume with RLS applied. But the consumers want to develop reports that fit their specific requirement on top of our semantic model.
With RLS and viewer permissions, we can only have Analyse in excel. Is there any way by which we can build reports with data restrictions applied?