RLS Limitation & Improvements

Hi QC 

• Using AD security groups to share reports,
• Separate reports from their datasets in different Workspaces
• Create App environment for Reports/Dashboards where these security groups can consume reports
• Add reports into different Audiences in App environment
• Add security groups to specific audiences

All those actions can help you govern who can see what.

For further control you can create a metric report to visualize reports access

Hi QC 

Thank you very much for your question about RLS. As you said, users need to be assigned roles, which is really not easy to manage.

However, there are ways to help you manage RLS, and you can try them:

You can enable dynamic security within Power BI Desktop by making use of the username() or userprincipalname() DAX functions and having the proper relationships configured.

Select “Apply security filter in both directions”, which ensures consistent filtering of the data across the table.

You can also manage users in a security group. You only need to assign a role to the group, and removing or adding a user to the group doesn’t require the user to be assigned a role again.

If you want to know more details, you can check out the link below:

https://learn.microsoft.com/en-us/power-bi/enterprise/service-admin-rls#define-roles-and-rules-in-power-bi-desktop

https://learn.microsoft.com/en-us/power-bi/enterprise/service-admin-rls#manage-security-on-your-model

Regards,

Nono Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.