Forum Discussion
Helper IIHow do I define Permission Level when publishing an app and specifying a specific user or group
Trying to bypass RLS is your problem. Its a security system designed to prevent bypassing, because it would be a security flaw otherwise. Taking into account your other thread, i'd suggest you need to use a superuser role in your model to negate the RLS for this user group. You are very much trying to bend Power BI into a weak security model that it simply doesn't allow. Its not that Apps aren't right for you, its that you can't bypass the security (and for good reason).
Apps are designed to be the live consumption area.
Workspaces are your draft/collaboration area.
Power BI desktop is your development space.
Your App should be for your readers, your workspace should be for your contributors.
The ability to "publish the app" allows you to hold back changes until you are ready to release them for the viewing audience. This lets your developers make changes to the report (not the model) and discuss those changes, seek approval etc. Once the changes are approved, you publish the app and only then do your readers get the new version.
Putting your users into a read-only role into the workspace, means they will always see the draft changes to your reports instead of the last "live" version. The read-only role should be used by content approvers where you wish to restrict to read access.
Helper IIWe would like to utilize apps so that the workspaces can be the "pre-prod" staging area.
However, seeing that an app doesn't allow a contributor role like the workspace does, App functionality just isn't going to work for our use case.
I need a way to bypass RLS in an app role, just like you can with a specific Workspace role. Until then, these consumers who need to consume reports cannot consume their content via an App because RLS is applied. These are regional managers consuming the conent who should have access to 100% of the rows, for this report.
Trying to bypass RLS is your problem. Its a security system designed to prevent bypassing, because it would be a security flaw otherwise. Taking into account your other thread, i'd suggest you need to use a superuser role in your model to negate the RLS for this user group. You are very much trying to bend Power BI into a weak security model that it simply doesn't allow. Its not that Apps aren't right for you, its that you can't bypass the security (and for good reason).
Apps are designed to be the live consumption area.
Workspaces are your draft/collaboration area.
Power BI desktop is your development space.