Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

The ultimate Microsoft Fabric, Power BI, Azure AI & SQL learning event! Join us in Las Vegas from March 26-28, 2024. Use code MSCUST for a $100 discount. Register Now

Reply
dludw0969
Frequent Visitor

RLS Question

Hi,  I'm new to RLS.  I've been testing this in power bi service and have gotten it to work just fine but I've noticed something that I'm not understanding .     If I created a RLS  role called PaseoRole  in my report and put the DAX expression for example   [Product] = "Paseo".   I publish the report to WORKSPACEA  and put  view rights for user3 and user 4 on the WORKSPACEA.  Then I assign only user3 to the PaseoRole.   

I would expect that :

  1. user4 could see all the data of the report because he is not assigned to PaseoRole  
  2. user3 would see only the data that has true to the DAX expression ...where the product = Paseo

My findings are 

user 4 can not see the report at all gets error until I give him contributor rights to the WORKSPACEA ... then the report loads and sees all the data

user 3 is working as expectied with only the view rights 

 

Why does user4 have to have contributor rights to the workspace.

 

Thanks in advance.! 

Donna

 

1 ACCEPTED SOLUTION
otravers
Community Champion
Community Champion

You need to create an RLS role for people who have access to everything (e.g. user4), just don't put any DAX expressions in its definition.

 

Meanwhile any other workspace role than Viewer (i.e. Contributor and above) bypasses RLS entirely.

------------------------------------------------
1. How to get your question answered quickly - good questions get good answers!
2. Learning how to fish > being spoon-fed without active thinking.
3. Please accept as a solution posts that resolve your questions.
------------------------------------------------
BI Blog: Datamarts | RLS/OLS | Dev Tools | Languages | Aggregations | XMLA/APIs | Field Parameters | Custom Visuals

View solution in original post

2 REPLIES 2
dludw0969
Frequent Visitor

Thank you otravers that worked,  appreciate the help!!

otravers
Community Champion
Community Champion

You need to create an RLS role for people who have access to everything (e.g. user4), just don't put any DAX expressions in its definition.

 

Meanwhile any other workspace role than Viewer (i.e. Contributor and above) bypasses RLS entirely.

------------------------------------------------
1. How to get your question answered quickly - good questions get good answers!
2. Learning how to fish > being spoon-fed without active thinking.
3. Please accept as a solution posts that resolve your questions.
------------------------------------------------
BI Blog: Datamarts | RLS/OLS | Dev Tools | Languages | Aggregations | XMLA/APIs | Field Parameters | Custom Visuals

Helpful resources

Announcements
Fabric Community Conference

Microsoft Fabric Community Conference

Join us at our first-ever Microsoft Fabric Community Conference, March 26-28, 2024 in Las Vegas with 100+ sessions by community experts and Microsoft engineering.

February 2024 Update Carousel

Power BI Monthly Update - February 2024

Check out the February 2024 Power BI update to learn about new features.

Fabric Career Hub

Microsoft Fabric Career Hub

Explore career paths and learn resources in Fabric.

Fabric Partner Community

Microsoft Fabric Partner Community

Engage with the Fabric engineering team, hear of product updates, business opportunities, and resources in the Fabric Partner Community.

Top Solution Authors
Top Kudoed Authors