Issue with row level security

[Anonymous]

Hi all,

I can't figure out this issue I am having with row level security - some members that I added to an existing workspace can view all data despite existing table entries. 

I've uploaded a duplicate of the report without any entries in row level security and these useres where able to see all data still when it was blocked out for others with identical table entries, so the issue should not be with the security table entries. 

I've checked workspace access and the users are added as "viewers" in the workspace as well as "viewer" without build in the report settings.

Not sure if there are any other settings I am missing? 

Not sure if relevant, but we just made the switch of the workspace to premium and it seems to concern all users added after this switch - but once again in workspace access these users have viewer permission only - security settings work fine for everyone previously added. 

Thanks!

[nandukrishnavs]

@Anonymous 

Thumb rule: RLS will not work if the users have edit access to the report. They will see all the data.

Instead of adding the users into the workspace, it is better to share the reports as Apps.

Did I answer your question? Mark my post as a solution!
Appreciate with a kudos 🙂

[Anonymous]

Thanks for your reply, it's the issue I'm having exactly - the users are set up the same as all the other users in the workspace, yet it seems like the have edit rights. 

I've checked in workspace access and the user have viewer rights assigned, and I've checked in dataset / manage permissions and the user has viewer assigned without build - so I am wondering if there is any other setting in the workspace that could assign edit rights except the workspace access. 

The only thing different to other users is they have been added to the workspace after activating premium on that workspace.

[aj1973]

Hi @Anonymous 

Did you add the user's email or name to the security level in the dataset in Powerbi.com?

[Anonymous]

When the user is not entered in RLS user still has global access, therefore I assume it is related to workspace settings - if I add the user to RLS nothing changes, global acces remains. 

It looks like the users have edit rights but I cannot find any settings that would allow them too, they are set up exactly the same as all other users. 

[aj1973]

The RLS is related to the Dataset and not to the workspace settings.

You need to manage their permissions in Dataset/Manage permissions.