RLS access

[3508026]

Good afternoon
I create the roles and add the members to the roles all good so far, but when I share the Dashboard with the team they can't access and need to request access to me, I just approve the request and finally they can access.

Is this normal or they should be able to access without having to request access. In this case what should I do?

[3508026]

Hi, I was unaware of the use of the 'App' I have been reading and you're right, it is the best option for a large audience. it's awesome!

Now I have a few questions to be able to use it correctly

As it is not a Workspace you don't need to add people to the "App", correct?
but in case you have established a RLS in the report, this is still maintained in the "App"

[collinq · Accepted solution]

Hey @3508026 ,

You will still need to add the names of the individuals (or group) to the app.  The RLS is about the data and the App permission is about who you allow to see the report at all.  So, it is two things working together.

[collinq]

Hi @3508026 ,

You may be conflating two things here?  The RLS is for the user to see the data in the report based on the roles that you create in desktop.  But, the ability to see a Dashboard - whether in the App or in the Workspace, depends on their ability to reach that location.  So, you have to give permissions in the App as well for them to even get there.  I recommend putting the Dashboard in an App and not the Workspace for them to see as this makes it a bit easier to control the permissions.

[3508026]

I think I understand.

If you publish to a Workspace it is expected that the people you share the reports with are there, and the RLS should work without a problem, correct.

In this case the people I have added to the roles are not part of the Workspace, so one of the ways I found to solve it was to add them to the report through 'Manage Permissions', but this does not prevent, that the message to 'request access' appears, so when I get it, I approve and they get the access.

So, I have two questions:
Is this the right solution? or
would it be better to add them to the Workspace? it was created for a few people in my department, but the recipients of our reports have grown, so maybe it would be better to create a Workspace for all these recipients.

[SaiTejaTalasila]

Hi @3508026 ,

You can test the RLS.You can refer below article 

https://azureops.org/articles/run-power-bi-report-as-different-user/

If it works at your end that means it will work for the user.From my recent experience they might be trying to open wrong URL.

I think it will help you.

Thanks,

Sai Teja 

[3508026]

Hi Sai,
My question was related to RLS and its impact on Apps
As 'Apps' is not a Workspace you don't need to add people to the "App", correct?
but in case you have established a RLS in the report, this is still maintained in the "App"

[collinq]

Hey @3508026 ,

I would still argue that you should do the App and not just the workspace....but, yes, you have to give them permissions to where the report resides.  

That said, if the user gets a "request access" AFTER you have given them access, are they waiting 5- 10 minutes after you gave the permission AND totally refreshing their browser before trying to get in?  And, are you sharing with the exact same userid that they are using to log in?