Forum Discussion
Power BI App not inheriting RLS permissioins
I've been trying various things to fix this but getting nowhere.
I have a Power BI report that has 6 different dynamic RLS roles, those RLS roles work as expected when I publish my report to a workspace. As part of dynamic RLS, I use an All Staff AD Group on the semantic model > security > row level security setting. I've then tested 2-3 usernames in each role using 'Test as role' within the workspace. I'm seeing exactly what I would expect (filtered down data specific to that individual).
However, when I then publish my app, and use six audience segments and add the All Staff AD Group, it's at this point the users see all the information rather than a filtered down set of the data specific to the individual.
No users have been added directly to the workspace, there is only me and one other Admin. I'm at a loss - I'm clearly missing something but no idea what. I've tried removing the All Staff AD Group from the semantic model and going with just a list of names, but again, when I get to the App - they see everything. Would anyone have some advice on what else I can try...
Thanks
Hi Anonymous
If you are still running into issues, I would recommend using SQL profiler to connect to your semantic model and see when the users login would roles are being applied to them.
8 Replies
Hi Anonymous
If you are still running into issues, I would recommend using SQL profiler to connect to your semantic model and see when the users login would roles are being applied to them.
Hi Anonymous ,
Thanks for reaching out to the Microsoft fabric community forum.
If you publish your Power BI Desktop report to a workspace in the Power BI service, the RLS roles are applied to members who are assigned to the Viewer role in the workspace. Even if Viewers are given Build permissions to the semantic model, RLS still applies. For example, if Viewers with Build permissions use Analyze in Excel, their view of the data is restricted by RLS. Workspace members assigned Admin, Member, or Contributor have edit permission for the semantic model and, therefore, RLS doesn’t apply to them. If you want RLS to apply to people in a workspace, you can only assign them the Viewer role.
Row-level security (RLS) with Power BI - Microsoft Fabric | Microsoft Learn
Please check if that is the reason you are facing the error
If you find this post helpful, please mark it as an "Accept as Solution" and consider giving a KUDOS.
Thanks and RegardsHi Anonymous
May I ask if you have resolved this issue? If so, please mark the helpful reply and accept it as the solution. This will be helpful for other community members who have similar problems to solve it faster.
Thanks and regards
Hi Anonymous ,
I wanted to check if you had the opportunity to review the information provided. Please feel free to contact us if you have any further questions. If the responses has addressed your query, please accept it as a solution and give a 'Kudos' so other members can easily find it.
Thanks and regardsHi Anonymous ,
As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided by the community members for the issue worked. If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.
Thanks ands regards
