How to properly implement RLS with shared datasets?

[Anonymous]

Hello,

I started with 4 .pbix files that have different visuals but the same dataset. The Reports were published, RLS defined and is working properly. In Power BI service I saw 4 Reports and 4 Datasets.

To reduce redunancy and improve maintainability I change this setup to a shared dataset. I created a file with the dataset only published it to my workspace and used this dataset for all the reports.

This setup works fine for me as an admin but not for people were the RLS is applied to.

I gave these people view permissions for the dataset and for the new reports.

When they try to  open the report they get notified that RLS is applied and that they cannpt view the report.

How can this be done or what is the best practice here?

[TomMartens · Accepted solution]

Hey @Anonymous ,

read about the separation of data and content here: https://learn.microsoft.com/en-us/power-bi/guidance/report-separate-from-model?WT.mc_id=DP-MVP-5003068

I create two Power BI App workspaces,  one that hosts the dataset and the other one hosts the content (reports/dashboards).
Report Designers do not have to be users of the data workspace.

Dataset permissions must be assigned to users which are not users of the data workspace.

The dataset permission Build must be granted to the users.

Hopefully, this helps to solve your issue.

Regards,

Tom