Forum Discussion

Rajnish366's avatar
Rajnish366
Frequent Visitor
1 year ago
Solved

Issues in Dynamic RLS - one of my user is by-passing the RLS rule and able to see all data.

In my RLS enabled report on Services. one of report user is able to see all data by by-passing RLS rule . Can some one Help me out to find the possible reason. RLS is based on Branch level 1 to ma...
  • GilbertQ's avatar
    1 year ago

    Hi Rajnish366 

     

    Please make sure that the user does not have any roles in the workspace, as that will allow them to see all of the data. except for a viewer role, any other role, and they'll be able to see all the data.

     

  • v-menakakota's avatar
    1 year ago

    Hi Rajnish366 ,

    Thank you for reaching out to us on the Microsoft Fabric Community Forum.

    As GilbertQ  mentioned, Ensure that the user is assigned to appropriate role within the workspace. As mentioned, any role with higher than 'Viewer' (such as Contributor, Member, or Admin) can bypass RLS and access all data, regardless of the RLS settings.

    Providing the documentation link which might help you in clear understanding:

     


    Row-level security (RLS) with Power BI - Microsoft Fabric | Microsoft Learn

    If this post was helpful, please give us Kudos and consider marking Accept as solution to assist other members in finding it more easily.

  • v-menakakota's avatar
    v-menakakota
    1 year ago

    Hi Rajnish366 ,

    Thank you for reaching out to us on the Microsoft Fabric Community Forum.

    You can modify the RLS filter in Manage Roles to ensure that users see only their assigned Cost Centers (CCs) that exist in the Fact Table.
    Approach 1 :Apply RLS on the Fact Table Instead of Dim Table.

     

    Approach 2:If you must apply RLS on the Dim Table, ensure it filters out CCs missing in the Fact Table.

    If this post was helpful, please give us Kudos and consider marking Accept as solution to assist other members in finding it more easily.

    Regards,
    Menaka.