Forum Discussion

Ole111's avatar
Ole111
Helper II
5 years ago

Composite Model - Access Restrictions Problem

Hello Community,

 

I need a help in solving the following issue.

 

There is a report with company's financial results, with restricted access to the data through RLS settings in the model.
Report is published to a workspace common for all employees (the roles and RLS limit the access for each user).

 

There was a need to create a separate report with a brief summary of key data for a whole company from above report with financial results. I created a summary report based on the dataset of above report plus added a new table of captions specific to the new report (composite model).
This new report was published to a new workspace shared with a group of users - they have different level of access to the source report of company's results (some can see only a part of data, some all of it).
All members of this group should see the same key numbers for a whole company, so there is no RLS applied in a new brief report.

As a result, after publishing of the report, only those of the users who have unlimited access to the source report can see the new brief report. The others can not see anything - just greyed-out fields; even year and month slicers.

 

When trying to test the security level in the new report I got a message:
"Any previously defined RLS security is no longer working. You will need to re-create RLS in Power BI Desktop."

 

That suggests that RLS shouldn't be inherited from a source report, so the access shouldn't be restricted.
Even if he source RLS interferes with the new report I can not manipulate with this from the new report since in Manage Roles I have only one table available (the new one with report captions).

 

Is there any way to make a brief report available without access limits from source report while using the source report model as a data source?

Replicating the same model in the new report would be a chore.

 

Thanks in advance for any help and regards.

Need Help

12 Replies

  • Anonymous's avatar
    Anonymous
    Not applicable
    5 years ago

    Hi Ole111 

    I think you may use Dierect Query for Power BI dataset function, then upload a loacl table. Then your connection mode will transfor to Mixed mode.

    For reference: considerations-and-limitations

    • RLS rules will be applied on the source on which they are defined, but will not be applied to any other datasets in the model. RLS defined in the report will not be applied to remote sources, and RLS set on remote sources will not be applied to other data sources.

    If you load your dataset into model, the rls won't work any more. You will need to set an other RLS for your new report. 

    Could you tell me what is the kind of your data source?

    Please download the latest version of desktop and try again.

    And please check the connection mode of your report and try to republish your report.

     

    Best Regards,

    Rico Zhou

     

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly. 

    • Ole111's avatar
      Ole111
      Helper II
      5 years ago

      Hi Anonymous

       

      Thanks for the response.

       

      The model had been created exactly as you wrote:

      1. Connected to Power BI Dataset (Direct Query)
      2. Added a table through inserting data (the mode had changed to Mixed)

      As for desktop version it is the latest one.

      Reading the documentation you refer to I wander how the RLS inheritance really behaves?:

      “RLS rules will be applied on the source on which they are defined, but will not be applied to any other datasets in the model.”

       Ho does it relate to information got when trying to test security status:

      “Any previously defined RLS security is no longer working. You will need to re-create RLS in Power BI Desktop.”

      Does ‘not working’ refer only to the new tables in composite model? If so, is there any way to give an access to the summary report based on source report for users who have RLS restrictions set in the source report?  

      • Anonymous's avatar
        Anonymous
        Not applicable
        5 years ago

        Hi Ole111 

        The RLS 's workload is as below.

        1. Manage role in Power BI Desktop.

        2. Publish report and add users into Role in Security from Dataset.

        I try to load a dataset with RLS into model by Direct Query for Power BI Dataset. There is no roles I set for the dataset in Manage role.

        So, if we use this function, we need to create RLS again in Power BI Desktop.

         

        Best Regards,

        Rico Zhou

         

        If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.