Forum Discussion
Composite Model - Access Restrictions Problem
Hi Anonymous
Thanks for the response.
The model had been created exactly as you wrote:
- Connected to Power BI Dataset (Direct Query)
- Added a table through inserting data (the mode had changed to Mixed)
As for desktop version it is the latest one.
Reading the documentation you refer to I wander how the RLS inheritance really behaves?:
“RLS rules will be applied on the source on which they are defined, but will not be applied to any other datasets in the model.”
Ho does it relate to information got when trying to test security status:
“Any previously defined RLS security is no longer working. You will need to re-create RLS in Power BI Desktop.”
Does ‘not working’ refer only to the new tables in composite model? If so, is there any way to give an access to the summary report based on source report for users who have RLS restrictions set in the source report?
Hi Ole111
The RLS 's workload is as below.
1. Manage role in Power BI Desktop.
2. Publish report and add users into Role in Security from Dataset.
I try to load a dataset with RLS into model by Direct Query for Power BI Dataset. There is no roles I set for the dataset in Manage role.
So, if we use this function, we need to create RLS again in Power BI Desktop.
Best Regards,
Rico Zhou
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Hi Anonymous
I have an impression that my point maybe unclear.
The RLS is set in source detailed report and I do not want to set any RLS in a new summary report.
The situation I face is following. Financial Report shows full P&L. Most of people have an access to data down to Gross Margin level (no access to overhead cost data). The new Summary Report should show to everybody summary of Revenue, Gros Margin and Operational Result (after overhead deduction) – thus no need for any RLS.
But if I use a Direct Query to Financial Report dataset to get key captions from P&L (with no details) as a result only people with no RLS restriction in Financial Report can see the Summary Report. Everybody included in RLS scheme in Financial Report can see only greyed-out placeholders of visuals (including year and month slicers) in the Summary Report.
So my understanding is that RLS restriction from the source report is inherited by the new report and people who cannot see the Operational Result in source file are not allowed to see anything in the Summary Report because it includes the Operational Result line.
Then my point is to find a way to show to everybody just a few key numbers from P&L using the model created for Financial Report where majority of the users can see only the part of the P&L.
Kind regards
Hey, did you ever find a solution? Facing exactly the same issue!
No.
Finally I ended up with creating the same model from scratch (all queries and calculated tables/columns as original one) and made a report showing just key data.
Then I published it to everybody with viewer rights.
That means that I have to maintain two models in parallel. Pity.
