Cannot see content with shared dataset until user views app

[aksuffolk-80]

Hi,

Hoping someone has an idea here. I'm having an issue where I have a workspace with a promoted dataset (Data Models) and a workspace for users to view the report (Reports). The users are members of an AD security group and have been granted viewer access to the Reports workspace. They are also granted RLS to the dataset in the Data Models workspace.

I have also published an app with the report in the Reports workspace and granted that same AD group access to that app. When the user tries to access the report from the workspace directly, they get the error: "You cannot see the content of this report because you do not have permissions to the underlying dataset". All users have an E5 license that has Power BI Pro.

If the user then goes to the App, they are able to load the app and see the report. Then, after viewing the app, if they go back to the workspace and to the report that they couldn't load, it loads now without issue. No other changes are performed between the time they go to the app and when they try the report again. This works 100% of the time, but it's not something we can do for 2000 users.

Is there something that I'm missing?

Thanks for the help.

A

[Anonymous]

I have a similar issue. The data set and the report are in the same workspace. The user with viewer level access can see reports with sources from SQL Servre on prem or SharePoint, but the report that sources from Dynamics 365 F&O shows with all Xs in the visuals. The see details link tells the user he doesn't have permission to see the data. If I change the access to Member, he can see the report correctly. The user doesn't have direct access to F&O (we're migrating from a different platform). What am I missing in here? 

Thanks.

[aksuffolk-80]

@Anonymous  Does the user (or AD group they are in) have Row-level security permissions to the dataset?

if you click on Datasets in the workspace and then go to the ... on the right of the dataset your report uses, then go to Security and add them and click Save. See if this helps.

[Anonymous]

It won't let me add the security group emails there. I'm checking with the security IT guy to see if a step was missed setting them up.

[GilbertQ]

Please let us know how it goes.

[GilbertQ]

Hi there

It would appear that after they get access via the App they have permissions to view the dataset.

What permissions do the users have in the App Workspace?

[aksuffolk-80]

That's what I thought too -- the app is changing some underlying permission that I cannot see.

The users have permission to that workspace the app is published in through the AD Security group. Their permission level is Viewer.

[GilbertQ]

That is really interesting, I have tested the viewer role in the past and people were able to view the reports.