Options until we get RLS for Dataflows?

[GTS_ONE]

Hi All,

So I know that there is no RLS permissioning available for Dataflows (one day, hopefully).  I'm sure we are in the same boat as a lot of others where we recognize the power and capability of Dataflows, but without being able to set row-level permissions, it's hard to make the data available to many different groups of  users because no one wants to create dozens and dozens of individually permissioned workspaces.

So if we want to have a single source of the truth but need to serve users only the data they have permissions to, what's the best way to do that in the current PBI framework without creating the administrative nightmare of multiple workspaces?  In other words, if we can't do RLS in Dataflows today, then what's the next best thing?

Thanks

[Anonymous]

I have the same issue.  I have a dataflow and a dataset in one workspace.  I have report authors who I've granted VIEWER permissions to on that workspace.  They will connect to the dataset and create reports that are published to their own workspace.  I have RLS enabled on the dataset, however, those report authors with VIEWER access can connect to the dataflow and completed negate RLS.

I'm thinking that I need to have one workspace for the dataflow and a separate workspace for the dataset.  Is that the only way?  Can anyone offer a better solution?

[v-alq-msft]

Hi, @GTS_ONE 

As you know, It is unsupported to apply RLS in dataflow currently. I'd like to suggest you use RLS applied to datasets .

You may also vote the idea and comment there to improve Power BI. It is a place for customers provide feedback about Microsoft Office products . What’s more, if a feedback is high voted there by other customers, it will be promising that Microsoft Product Team will take it into consideration when designing the next version in the future. 

Best Regards

Allan

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[GTS_ONE]

Thanks, we already use RLS for Datasets but I think you'd agree this is different from being able to use RLS with Dataflow.

I know this idea has already been submitted.  What I'm asking for in this post is what other strategies people may be using in the meantime.

[GTS_ONE]

Maybe answering my own question... but could we achieve the same thing by loading up to the Common Data Model and then using Business Units permissioning?