Forum Discussion
PBI Desktop and Service different behavioral for RLS testing (View as Role vs Test as role)
Hi tomas12344 ，
Not a mistake.
Within Power BI Desktop, Other user displays different results only if you're using dynamic security based on your DAX expressions.
Please refer.
Row-level security (RLS) with Power BI / Validate the roles within Power BI Desktop
Best Regards,
Gao
Community Support Team
If there is any post helps, then please consider Accept it as the solution to help the other members find it more quickly. If I misunderstand your needs or you still have problems on it, please feel free to let us know. Thanks a lot!
How to get your questions answered quickly -- How to provide sample data
Yes, this i understand, as i have qritten. But i would except the same behavioral in PBI Desktop and Service (i mean when using the function to test RLS).
Hi tomas12344 ,
Sorry, I didn't read the question clearly.
// When i choose in the "Now viewing as" different person (email ID), the report does not reflect this change.
1.different person (email ID) Does this user ID have access to the dataset?
For example, if I add the test id to the aa role, when I use view as aa it displays correctly, but when I enter the id above it, it displays all the data because I have full access to the dataset.This user is the administrator of the workspace and has full access to the dataset in the workspace.
If that's not the reason, you can also refer to this, or alternatively share more details of the test. Thanks in advance.
Avoid using RLSBest Regards,
Gao
Community Support TeamIf there is any post helps, then please consider Accept it as the solution to help the other members find it more quickly. If I misunderstand your needs or you still have problems on it, please feel free to let us know. Thanks a lot!
How to get your questions answered quickly -- How to provide sample data
HI
Yes, the user, with wich i test the RLS has access to the report. And when the user log in with his credential to PBI Service, the RLS is working as expected. User is only Viewer.
The "Now viewing as" is working, only when i log on, with my credentials and choose to view as the role, i have created for this purpose. I'm creator of the report and have Member access. When i choose to view as different user, (enter the ID to Now viewing as), it does not shows correctly the results, it shows the data as i can see it, that means without the RLS. In this case, when i use the userprincipalname function, it show my ID (as i'm logged).
When using the same in PBI Desktop (same report, rls,..., View as ... email ID) in this case (testing), with the userprincipalname function i see my ID (ID i mean always email, as this is the log in to service).the problem is, that in dektop and Service, i get different results, when testing RLS. But when user log in to service with his credential, it works.
The test case is very simple:1. create report and rls in Desktop
2. set up RLS in Desktop
3. test RLS in Desktop - working, when i choose Modeling->View as-> AA(choose role, that was created (testing under my ID)), or later choose View as-> AA (choose role) and enter "Other user" [email protected] - THIS IS WORKING - both. I see, what should, base on the RLS.
4. publish to Service
5. set security on the corresponding dataset, add user to the role AA in Service
6. then on the corresponing dataset - Security->AA(Role created)->Test as role
7. then in report (which opens), when loged with my credential, i choose Now Viewing->Select Role =AA - THIS IS WORKING. I see, that shoudl be, base on the RLS.
8. then i set ID of other user to Now Viewing as->Select Person ( i put email ID). THIS IS NOT WORKING. The userprincipalname function show my ID in Service(for this case), but in Desktop, i see the other person ID, i have set.
The email ID must be correct, because when the user log in to Service, the RLS is working. the RLS rules are set base on email ID of the user.