Difference between RLS in a workspace vs app

[mmossel]

- Is there a difference between RLS via a workspace (report, dashboard) or an App?

- It is necessary to enable the viewer role to enforce RLS in a workspace; are there any configuration considerations when publishing as an app?

Thank you

[v-easonf-msft · Accepted solution]

Hi, @mmossel 

Rls is discussed for the underlying data source, so report and app are restricted by rls. 

If you publish your Power BI Desktop report to a workspace in the Power BI service, the RLS roles will be applied to read-only members who are assigned Viewer access to the workspace. Even if Viewers are given Build permissions to the dataset, RLS will still apply. For example, if Viewers with Build permissions use Analyze in Excel, their view of the data will be protected by RLS. Workspace members assigned Admin, Member, or Contributor will have edit permission for the dataset and, therefore, RLS won't apply to them. You'll need to indicate that members can only view Power BI content in the workspace settings.

For more details,please refer to this document.

Row-level security (RLS) with Power BI 

Best Regards,
Community Support Team _ Eason