Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
9 years ago

Power BI app and RLS Security

Hi all,

 

I'm experimenting with the new Power BI apps to distribute content. I created a security role in PBI Desktop, which users the Azure USERNAME() to apply security for sales people. When I add a specific sales person or the sale group to the security role on the dataset in Power BI service, I can then publish my app and see the security applied. All is well here; however, I would like this invidiual to be able to Edit the report and Pin tiles to create their own dashboard, while still only seeing the records related to their security role/sales performance. It seems I cannot achieve both of these. Either they can edit the report and see everything, or they can only see their data with no edit access whatsoever.

 

Any ideas here? Should I revert to using content packs instead?

 

Thanks!

Need Help

11 Replies

  • GilbertQ's avatar
    GilbertQ
    Super User
    9 years ago
    Hi there, what if you had to make them a Member of the App Workspace?

    I have created an App Workspace where the people can still only see their applied data from RLS.

    Another option is to let the individual connect directly to the data model in the Power BI Service as you could do with the recent update in Power BI Desktop?
    • Anonymous's avatar
      Anonymous
      Not applicable
      9 years ago

      Thanks for the reply.

       

      Yes, they are members in the App workspace, with Edit privileges. However, when RLS is applied, they cannot edit the report at all, and therefore they cannot even pin tiles to the dashboard. I know this feature is still in preview, so maybe it's a bug?

       

      Using the content pack approach, it applies RLS and at least it allows them to "make copies" of the dashboard and reports and then edit their local copies as they see fit. 

       

      In this scenario, we prefer not to have the sales people download and use PBI Desktop. 

      • GilbertQ's avatar
        GilbertQ
        Super User
        9 years ago
        Hi there

        In the App Workspace settings are the members able to view or edit?

        I inclined to think that the setting is set to Read Only for Members.
  • v-qiuyu-msft's avatar
    v-qiuyu-msft
    Community Support
    9 years ago

    Hi Anonymous,

     

    In a Power BI app workspace, RLS role will be only applied to the read-only members. See: Using RLS with Groups in Power BI. After we publish the app, end users get that app, RLS will also applied when users view app. But end users are not able to edit apps content, they only have view permission.

     

    For your requirement, you can submit a idea here about the same function "Make a copy" as in content pack.

     

    Best Regards,
    Qiuyun Yu