Question on RLS and Download PBIX file

[PhillieB69]

Hi,

We have published a dataset for which users should only be able to see the data for their respective business unit. This has been setup using RLS. Within PBI service this works as expected. 

However we would also like to enable these users to do their own analysis within PBI desktop. This can be accomplished by connecting to the dataset in service or by downloading the PBIX file.

Now I am wondering if the 'download to PBIX' option will retain the RLS setup? Thereby not opening a backdoor for users to see data they are not entitled to see?

Any response would be much appreciated..

Philip

[jeffshieldsdev]

Downloading will retain the RLS settings, but the file will contain all the data--same as if you sent them the .PBIX file in email/OneDrive.

[PhillieB69]

Thanks for the reply Jeff! If I understand correctly users would be able to access data they are not allowed to see?

If so, any workarounds you can think of?

Philip

[v-piga-msft · Accepted solution]

Hi @PhillieB69,

---

---

Firstly, agree with jeffshieldsdev, the user who download pbix which configured with RLS will see all the data.

Actually, if the user could download the pbix, it seems that the user have the edit permission for the report.  As we know, RLS won't work for the workspace which allow Members can edit Power BI content in the app workspace.

As a workaround, the feature export data may help you achieve your requirement.

Best  Regards,

Cherry

[PhillieB69]

Clear, will look into the export data solution.

Thanks Jeff and Cherry!