Forum Discussion
Changing Role for Row-Level Security
- 1 year ago
Hi DataFun,
Thank you for reaching out to the Microsoft Fabric Forum Community.You're right Power BI’s RLS should reflect the assigned Global role, which should show all data if unfiltered. The TRUE() suggestion for the Global role ensures all data access but isn’t needed if the role is already unfiltered. If the user still sees only EMEA data, try these steps:
- In Power BI Service, confirm the user is only in the Global role, not EMEA, and check for conflicting Azure AD group memberships.
- In Power BI Desktop, verify the Global role has no filters and test with View As, and republish the dataset.
- Ask the user to clear their browser cache or use an incognito window, as permission changes may take 15–30 minutes to propagate.
- Ensure no dynamic RLS (e.g: USERPRINCIPALNAME()) or report-level filters restrict data to EMEA.
- Test with another user in the Global role to isolate the issue and manually refresh the dataset in Power BI Service and retest.
If this information is helpful, please “Accept as solution” and give a "kudos" to assist other community members in resolving similar issues more efficiently.
Thank you.
I will try that, but why would this be necessary. I removed the other role and added the new role. Shouldn't it process the RLS based upon the assigned role?
- v-ssriganesh1 year agoCommunity Support
Hi DataFun,
Thank you for reaching out to the Microsoft Fabric Forum Community.You're right Power BI’s RLS should reflect the assigned Global role, which should show all data if unfiltered. The TRUE() suggestion for the Global role ensures all data access but isn’t needed if the role is already unfiltered. If the user still sees only EMEA data, try these steps:
- In Power BI Service, confirm the user is only in the Global role, not EMEA, and check for conflicting Azure AD group memberships.
- In Power BI Desktop, verify the Global role has no filters and test with View As, and republish the dataset.
- Ask the user to clear their browser cache or use an incognito window, as permission changes may take 15–30 minutes to propagate.
- Ensure no dynamic RLS (e.g: USERPRINCIPALNAME()) or report-level filters restrict data to EMEA.
- Test with another user in the Global role to isolate the issue and manually refresh the dataset in Power BI Service and retest.
If this information is helpful, please “Accept as solution” and give a "kudos" to assist other community members in resolving similar issues more efficiently.
Thank you.- DataFun1 year agoHelper I
Rohit, Thank you for a detailed and thoughtful response. I apreciate it. I will try this and see if it works.
- v-ssriganesh1 year agoCommunity Support
Hi DataFun,
I hope this information is helpful. Please let me know if you have any further questions or if you'd like to discuss this further. If this answers your question, please accept it as a solution and give it a 'Kudos' so other community members with similar problems can find a solution faster.
Thank you.