How to Use RLS with Workspace Permission

[Jay_AVA]

Hi everyone,

I'm using RLS to limit the access to spicific data, and it works fine when the user's permission in workspace is Viewer. 

Besides, I'm able to change Viewer to Admin to ignore the RLS for some of my users, by republishing the report to the workspace.

However, I find out that I'm not able to change it back to reapply RLS to that user. For instance, if someone becomes Admin in your workspace once, you can never apply RLS to that user, even you change the permission back to Viewer. Unless you create another workspace in where the user is Viewer. 

I don't know whether that's true or workspace needs more time to reapply RLS. 

Is there a way that I can reapply RLS to Admin users in the existing workspace?

Any helps would be appreciated. 

[otravers]

If this is really happening you need to report it to Microsoft support as this would be a very serious bug.

[Jay_AVA]

It works fine in my colleague's laptop. I guess it's just the function "Test As Role" has some lag. 

Thanks for your advice. 

[GilbertQ · Accepted solution]

Hi @Jay_AVA 

I have never heard of that happening.

What I would suggest is to rather deploy the reports via an App, and then control the RLS via the RLS settings. This way you can ensure that it will work as expected?

Other than that it does sound like a bug if it does not re-apply the View Permissions.

What happens if you have to remove the user from the App Role, and then add them back in does that work?

[Jay_AVA]

It's solved. It works fine in my colleague's laptop. I guess it's just the function "Test As Role" has some lag. 

Now I know, it's better to use another account to run the test.