Forum Discussion

thebigwhite's avatar
thebigwhite
Icon for Helper II rankHelper II
6 years ago
Solved

Is it possbile that a specif user can bypass the RLS security?

We are facing a particular case with an User that even he is assigned to a specific role and is set as "Viewer" seems to by pass the security role. 

It's extremely curious cause with all other users of our domain the role is working fine. 

Are there role on Office 365 that can bypass the security role?

Thanks 

 

Data Protection
Need Help
  • thebigwhite's avatar
    thebigwhite
    6 years ago

    We have republished  the report and re-inserted the user on the workspace.

    Now the security is working fine.

    I think our supplier had fixed the role which likely was not working correctly.

     

    Thanks for your help

     

6 Replies

  • collinq's avatar
    collinq
    Icon for Super User rankSuper User
    6 years ago

    Hi thebigwhite ,

     

    Is this an Analysis Service live connection?  According to this article, https://docs.microsoft.com/en-us/power-bi/admin/service-admin-rls  "You can't define roles within Power BI Desktop for Analysis Services live connections. You need to do that within the Analysis Services model."  

     

    Also, when in Desktop and you select "View as Roles" and select the role that this person is in does it work as expected?  Can you confirm that you only have this person in one single role and not conflicting roles?

     

    I would appreciate Kudos if my response was helpful. I would also appreciate it if you would Mark this As a Solution if it solved the problem. Thanks!
  • Anonymous's avatar
    Anonymous
    Not applicable
    6 years ago

    HI thebigwhite,

    I'd like to suggest you check this account to confirm he only has 'read' permission of the related dataset, or the RLS filter effect will be ignored.
    Regards,

    Xiaoxin Sheng

    • thebigwhite's avatar
      thebigwhite
      Icon for Helper II rankHelper II
      6 years ago

      The account has got only viewer permission and the dataset is not linked to Analysis services (just dataflow).

       

      • Anonymous's avatar
        Anonymous
        Not applicable
        6 years ago

        HI thebigwhite,

        Did this user has global admin permission of a group of specific workspaces? How did you RLS configure, have you enabled UPN on this user that mapping this user to other accounts? (if RLS is based on the user mapping table, please also take a look on it to confirm if anything specific on that user)

        Regards,

        Xiaoxin Sheng