Forum Discussion

Cihan61's avatar
Cihan61
Frequent Visitor
3 years ago

RLS And authorizations

Hello all,   we have the following problem in our company: We don't want certain AD groups to have access to a dashboard. I have prepared and uploaded the authorization tables in the desktop versi...
Need Help
Cihan61's avatar
Cihan61
Frequent Visitor
3 years ago

Hey Tutu_in_YYC,

 

we have two workspaces. Different viewer security groups have been created for both workspaces.

 

Workspace Crew > Crew_Readers
Workspace Operations > Ops_Readers

 

The person is in both view security groups. While it works in Workspace Operations, it does not work in Workspace Crew. But strange is also that some people Workspace Crew despite Crew_readers authorization, can not see the data (as it should be).

Tutu_in_YYC's avatar
Tutu_in_YYC
Super User
3 years ago

Assuming when you tested in both workspaces, they are individual datasets ( i.e not shared dataset between workspace).

If it works in Workspace Operations, but doesnt in Workspace Crew. It could be the person e.g Adam, has been assigned with a different role in a different way.

Example
In Workspace Operations, you have these members:

1. Ops_Readers - Assigned as Viewer - contains Adam

2. Adam - Assigned as Member

3. SecurityGroup2 - Assigned as Member - contains Adam


(2) or (3) will bypass RLS, and Adam will see all data.

  • Cihan61's avatar
    Cihan61
    Frequent Visitor
    3 years ago

    thanks 🙂 But ....

     

    Workspace Operations we have followings Security Groups:

    OPS_Readers (Viewer) > Contains Adam

    OPS_PowerUsers (Admin) > Without Adam

     

    Workspace Crew we have followings Security Groups:

    Crew_Readers (Viewer) > Contains Adam

    Crew_PowerUsers (Admin) > Without Adam

     

    There are no other security groups. 

    • Tutu_in_YYC's avatar
      Tutu_in_YYC
      Super User
      3 years ago

      Same report and dataset in both workspaces? As otravers mentioned, what did you use for the RLS DAX syntax?

      • Cihan61's avatar
        Cihan61
        Frequent Visitor
        3 years ago

        i have a file that i have saved locally and i load this file in two different workspaces. In that case we would have two different datasets in two different workspaces, right? But if I delete one of them in a workspace, the same thing happens.

        The Dax formula is the following:

         

         

        I am not sure if it is really due to the Dax formula. When I test it on the desktop version, it works fine. I enter the email address of the person and it works.