Power BI app and RLS Security

[moneelta]

I have created a report with Row Level Security (RLS) and published it in a App. The user is a part of a role that limits what they see in the report but if the go to the dataset and "analyse in excel" the donwloaded file has all the data. Is there a way to restric the data that is downloaded via the dataset?

[Prashant_leo]

Check your tenant setting, you might have "analyze in excel with live connection "switched on.

[DocHypNL]

This helped me

Source: https://docs.microsoft.com/en-us/power-bi/service-admin-rls

[GilbertQ]

Hi there

The RLS will apply when they use the Analyze in Excel.

The one question that I have is the user in the App Workspace?
If any user is part of the App Workspace they will get to see all the data. That is currently by design which should hopefully be fixed in the New App Workspace experience.

[moneelta]

Thank you - yes they are part of the App Workspace. I did a test and clicked the "Analyse in Excel" option via the App Workpace as this Test User and they could see all the data. I wasnt sure if I hadnt applied the RLS appropiately.

[GilbertQ]

If you remove them from the App Workspace and leave them as a member then the RLS will apply

[moneelta]

I removed them from the App Workspace and added them as member of the Workpace (members can only view content). The RLS applies but they can still Analyse in Excel and access the other data. I assume this is a design issue.

[GilbertQ]

What if you add them to just the App

[moneelta]

Thats how I had it initially. It works great at filtering the report content but unfortunately users can still access the data if they analyse in excel.

[GilbertQ]

I am pretty certain that it will work right with Analyze in Excel.