Forum Discussion

VSY_90's avatar
VSY_90
New Member
3 years ago
Solved

Power BI APP Multiple Audience

Hi All, I have four Azure AD created and has assigned at Workspace level. For the one of report i have defined Dynamic RLS, and one of Viewer AD as assigned to report as part of RLS.    Now when i...
Need Help
  • v-yueyunzh-msft's avatar
    v-yueyunzh-msft
    3 years ago

    Hi , VSY_90 

    According to your description, you're having trouble using Audience. People who share see content they shouldn't.

    We can see that there is a "worksapce user" on the right side of the Audience creation and it seems can not be deleted.

    In other words, if there is a role in this workspace, then he can see all the audiences in the app.

    If you want to display different tabs for different users based on this audience, you need to remove the permissions of the workspace and add them back to the corresponding audience permissions.

    For more information, you can refer to :
    Publish an app in Power BI - Power BI | Microsoft Learn

     

    Thank you for your time and sharing, and thank you for your support and understanding of PowerBI! 

     

    Best Regards,

    Aniya Zhang

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly

matthewbardon's avatar
matthewbardon
Frequent Visitor
2 years ago

Hi, I know this is an old post but this is the only post I have come across describing this problem.

The problem is, as far as I understand, users of an app need to have access to the workspace in order for RLS permissions to work, in turn granting them access to all audiences in the app - is this correct?

Is there no way of removing the 'workspace users' from specific audiences in the app? 

As a result can RLS and Audiences work in conjunction in an app?

shintamanning's avatar
shintamanning
Regular Visitor
2 years ago

 Hi Matthew, Did you ever figure this out? I am in the same boat. I need users to be added to workspace as Viewer so RLS gets enforced. But now they can see other audiences' contents.

 

 

  • matthewbardon's avatar
    matthewbardon
    Frequent Visitor
    2 years ago

    Hey, 

    Yeah we found a way around it. We essentially have 3 steps to granting a user access. 

    1. Add them to a RLS Role.

    2. Give them view permissions on the dataset where the RLS is held (think this was the missing peice for us when I wrote this comment).

    3. Add to the audience(s) in the app.

     

    We don't touch workspace permissions