Forum Discussion
RLS - Unrestricted Access
I have dynamic RLS set up so that our sales reps only see data for accounts that they own (based on account owner name and UserPrincipalName()). The rest of my users need to see ALL data. I have the sales reps assigned to the Sales Rep RLS rule. For any user that isn't part of this rule and should see ALL, they are getting errors that they don't have access to the data even though they have the report shared with them and they aren't defined in the Sales Rep security rule.
Do all users need to be part of a security role if you have one set up at all? I would think that they don't because a security rule doesn't apply to them.
2 Replies
- Hi there
The reason that it is currently not working is because by default if you are not part of any role, then you do not get access to see any data.
The one quick way is if possible is to add an AD Security Group for the other users to an Admin Role, which will allow them to see everything.
If you use the new App Workspaces, you can now add in AD Security Groups, Exchange Groups or Office 365 groups into the App Workspace. And if you make that group an Admin they too should be able to see all the data.
There is also a good blog post by Reza Rad explaining how to create Admin users, but you will still need to have a list of the users who will have access to see all the data: http://radacad.com/dynamic-row-level-security-with-manager-level-access-in-power-biThanks for the clarification. Here's the odd thing...Let me know if this is expected.
If I share the report manually with people, they need to be in a security role in able to see any data. Now - this same report in the same workspace is also published as an app...anyone that is accessing via the app instead of via manually sharing can access the data without needing to be part of a security role.
Is this expected?
