Power BI Workspace App - Security and Update

[magji]

We have a workspace in our organization which conatins aroun 10 Power BI Reports.
Each report has different access group.

We are thinking to create an app and to publish all reports there.

1. If I publish all the reports in the app, will the report level security apply in the app. E.g If a member has access only in Report 3, will this member see other reports in the app? 

2. If I make change to any of the reports in the app, will the changes reflect it or I have to publish it again in the app?

[SaiTejaTalasila · Accepted solution]

Hi @magji ,

App is just like a box to deliver reports to end users. If you have RLS at the semantic model level, then it will work whether end users accessing from workspace/App. And you are not suppose to provide Role above “Viewer” on workspace level.

Note-RLS only applies to viewers.

Thanks,

Sai Teja

[Anonymous · Accepted solution]

Hi @magji ,

Thank you for @SaiTejaTalasila answer , and I have other suggestions:

Question 1:

• When you publish Power BI reports to an app, the report-level security (RLS) you’ve set up in the workspace will still apply within the app.
• If a user has access only to Report 3 due to RLS, they will only see Report 3 when accessing the app. Other reports won’t be visible to them.
• In summary, RLS filters will be enforced in the app, ensuring that users see only the data they are authorized to view.

Question 2:

• If you make changes to any of the reports (e.g., modify visuals, add new data, or adjust RLS filters), you don’t need to republish the entire app. You should update the App.

Below is the official link will help you:

Apps in Power BI - Power BI | Microsoft Learn

Best Regards,

Xianda Tang

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[SaiTejaTalasila · Accepted solution]

Hi @magji ,

App is just like a box to deliver reports to end users. If you have RLS at the semantic model level, then it will work whether end users accessing from workspace/App. And you are not suppose to provide Role above “Viewer” on workspace level.

Note-RLS only applies to viewers.

Thanks,

Sai Teja