Forum Discussion
How to refresh workspace when lower role assignment from member to viewer?
Dear Experts,
We encountered a scenario that when users had been assigned to the workspace with member role and one day they were changed from members to viewers, the RLS does not applied eventhough currently they are viewers.
We have set the security setup for RLS in the semantic but it does not work only for these viewers.
(For the other users who are assigned originally as viewers, the RLS work perfectly)
Is there a lead time for the workspace to reflect the change or is there any setup to force workspace updated from the setup?
we are waiting for at least 6 hours but the setting does not refect yet.
Hi Experts,
The problem has been solved.
The role in workspace is refreshed after the user logged out and signed in again according to note in the below link.
"After you add or remove a user or a group for workspace access, the permission change only takes effect the next time the user logs into Power BI."
https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-give-access-new-workspaces
5 Replies
- ibarrau
Super User
Hi. That's weird considering that only viewers are the role that will be affected with RLS. It shouldn't be any problem from changing from member to viewer. Something that might help here is checking the permission of the dataset. Go to the semantic model "manage permission" settings. Make sure the viewers don't have build permission.
Info: https://learn.microsoft.com/en-us/power-bi/connect-data/service-datasets-permissions
Also check that the user doesn't have any additional permission in a Power Bi App as builder too.
I hope that helps,
Hi, Thanks for your message.
This seems like a bug to me.
In the manage permission, I have checked and those viewers do not have build permission.
I also removed them from the workspace and re-added them with the viewer role assignment and do not add them in the RLS list of the semantic model but they still can display all the data.
Hi ibarrau ,thanks for the quick reply, I'll add more.
Hi ALT-Oraphan ,
If this problem occurs, perhaps you could try removing the user from the workspace role and then re-adding and re-assigning 'Viewer'.
Best Regards,
Wenbin ZhouHi, Thanks for your message.
I have tried removing those from the workspace and re-added as viewers but they still can see all of the data in the semantic although they are not in the list of RLS.
Hi Experts,
The problem has been solved.
The role in workspace is refreshed after the user logged out and signed in again according to note in the below link.
"After you add or remove a user or a group for workspace access, the permission change only takes effect the next time the user logs into Power BI."
https://learn.microsoft.com/en-us/power-bi/collaborate-share/service-give-access-new-workspaces
