Forum Discussion

hhuddleston's avatar
hhuddleston
Advocate III
9 years ago
Solved

PBI App and row Level Security

I am attempting to set up and configure a Power BI App for specific user groups, I have set up an app just for selected users, and I have imported an existing  data model with Row Level Security. The first test user I set up is configured to only access those company locations in Florida, yet when I sign on as the test user, there is no restriction on the data that the "Florida Only" user can access. What am I missing here? any help is appreciated!

 

Herb

Need Help
  • v-yulgu-msft's avatar
    v-yulgu-msft
    9 years ago

    Hi hhuddleston,

     

    Please follow the steps described in this article to check whether you have configured RLS correctly.

     

    Besides, please be aware of that, after publishing Power BI Desktop report to an app workspace within the Power BI service, the roles will be applied to read-only members. If you have configured the app workspace so that members have edit permissions, the RLS roles will not be applied to them. Users will be able to see all of the data.

     

    Regards,
    Yuliana Gu

6 Replies

  • v-yulgu-msft's avatar
    v-yulgu-msft
    Microsoft Employee
    9 years ago

    Hi hhuddleston,

     

    Please follow the steps described in this article to check whether you have configured RLS correctly.

     

    Besides, please be aware of that, after publishing Power BI Desktop report to an app workspace within the Power BI service, the roles will be applied to read-only members. If you have configured the app workspace so that members have edit permissions, the RLS roles will not be applied to them. Users will be able to see all of the data.

     

    Regards,
    Yuliana Gu

    • hhuddleston's avatar
      hhuddleston
      Advocate III
      9 years ago

      This resolved the issue - once I made the App read-only, it applied RLS. Thanks for the assist.

      • v-yulgu-msft's avatar
        v-yulgu-msft
        Microsoft Employee
        9 years ago

        Hi hhuddleston,

         

        Glad to hear that. Please kindly mark the helpful reply as an answer so that others having similar concern can benefit from here.

         

        Thanks,
        Yuliana Gu

  • Anonymous's avatar
    Anonymous
    Not applicable
    9 years ago

    hhuddleston Are you sure you are signed in as the test user and not your account? Depending on how your security is set up, it could be like mine (SSO or simliar) where it appears you are logging in with the testuser in your domain, but it actually recognizes you and signs you in with your creds.

    Outside of that. From my understanding RLS should work for members provided they are read only...

     

  • Bimtng's avatar
    Bimtng
    Frequent Visitor
    9 years ago

    Hi Herb.

     

    I assume that you have taken this steps:

     

    1. Created a rule in DAX for giving access just to Florida data in your report.

    2. Assigned this rule to the test user in the data set in PWBI service.

    3. The test user is not an administrator of the report.

     

    If you have not taken any of this steps, surely the test user could see all data. This is my experience.

     

    Hope it helps.

     

    Best regards.