Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Don't miss out! 2025 Microsoft Fabric Community Conference, March 31 - April 2, Las Vegas, Nevada. Use code MSCUST for a $150 discount. Prices go up February 11th. Register now.

Reply
Hoping
Helper II
Helper II

RLS and Access to Semantic Model

I am trying to test RLS implement on a semantic model without giving access to clients.

 

I am using Security --> Test Role  to make sure RLS is working as intended in DEV environment. The Report and Semantic Model have been implemented on 2 different obix files.

 

I have a Viewer AD group for each role - Role-A-Viewer and Role-B-Viewer

 

I have 3 questions:

 

Question 1: If I add the client to the Viewer AD group for a Role, will they get access to the report and / or semantic model ? This is in DEV and we don't create Apps here.

 

Question 2: When I tried to test with a testuser ID, I get an error that the user doest not have access to dataset or report.  After searching online, a post said I need to provide "Read" access to dataset.  When I click on Manage Permissions, I only see options to modify, share or build but NOT Read. How can I provide "READ" access to the dataset if that's what is causing that error displayed as a banner on the top.

 

Question 3: In production however, we create an App and give access to clients by adding them to AD group that has access to the App. No one is given explicit access to dataset. Does this implicitly give Read access to the memebers of the AD group ? In other words if a person is a viewer in an app do they get "READ" access to dataset automatically ?

1 REPLY 1
lbendlin
Super User
Super User

You are mixing a couple of concepts here. Assuming you are on premium. You should NOT give ANY access to the workspace. Instead, give access through the app.  Unless you enabled auto app install, there is one additional step that all users need to complete - they need to "install"  (register) the app  before they can consume the reports or use the XMLA endpoints.

Helpful resources

Announcements
Las Vegas 2025

Join us at the Microsoft Fabric Community Conference

March 31 - April 2, 2025, in Las Vegas, Nevada. Use code MSCUST for a $150 discount! Prices go up Feb. 11th.

Jan25PBI_Carousel

Power BI Monthly Update - January 2025

Check out the January 2025 Power BI update to learn about new features in Reporting, Modeling, and Data Connectivity.

Jan NL Carousel

Fabric Community Update - January 2025

Find out what's new and trending in the Fabric community.