RLS Question

[dludw0969]

Hi,  I'm new to RLS.  I've been testing this in power bi service and have gotten it to work just fine but I've noticed something that I'm not understanding .     If I created a RLS  role called PaseoRole  in my report and put the DAX expression for example   [Product] = "Paseo".   I publish the report to WORKSPACEA  and put  view rights for user3 and user 4 on the WORKSPACEA.  Then I assign only user3 to the PaseoRole.   

I would expect that :

1. user4 could see all the data of the report because he is not assigned to PaseoRole  
2. user3 would see only the data that has true to the DAX expression ...where the product = Paseo

My findings are 

user 4 can not see the report at all gets error until I give him contributor rights to the WORKSPACEA ... then the report loads and sees all the data

user 3 is working as expectied with only the view rights 

Why does user4 have to have contributor rights to the workspace.

Thanks in advance.! 

Donna

[dludw0969]

Thank you otravers that worked,  appreciate the help!!

[otravers · Accepted solution]

You need to create an RLS role for people who have access to everything (e.g. user4), just don't put any DAX expressions in its definition.

Meanwhile any other workspace role than Viewer (i.e. Contributor and above) bypasses RLS entirely.