RLS for builders, semantic model doesn't show on workspace

[Lamasta]

Hello,

We are trying to put in place an RLS for users with viewing permission to be able to access Semantic models via direct query or excel. The problem is we can't manager to have those semantic models show on the workspace with the viewer role. We tried giving them "Build" on the semantic model as well to no avail, the semantic models just don't show to them.

How to solve this ?

[v-bmanikante · Accepted solution]

Hello @Lamasta ,

Thank you for reaching out to Microsoft Fabric Community Forum.

@andrewsommer @BhavinVyas3003 Thank you for your quick insights.

@Lamasta The super users already provided the correct answer, and I just want to confirm it with a bit more detail in case it's helpful to others. The issue is that having just the Viewer role isn't enough for users to see or connect to semantic models in Excel or through DirectQuery.

To fix this, you need to explicitly give them "Build" permission on the dataset (semantic model). Here's how:

1. Go to the dataset in the workspace.
2. Click the three dots (…) → Manage permissions.
3. Add the users or group and give them Build permission.

Also, if you’re using RLS, make sure the users are added to the right roles under the dataset’s Security settings.

Lastly, if you're sharing via an App, make sure the dataset is included in the app and the app access settings are correct.

If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it!

Regards,

B Manikanteswara Reddy

[v-bmanikante]

Hi @Lamasta ,

We wanted to kindly follow up to check if the solution provided for the issue worked? or Let us know if you need any further assistance?

If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.

Regards,

B Manikanteswara Reddy

[v-bmanikante]

Hi @Lamasta ,

As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided for the issue worked? or Let us know if you need any further assistance?

If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.

Please don't forget to give a "Kudos " – I’d truly appreciate it!

Regards,

B Manikanteswara Reddy

[v-bmanikante]

Hi @Lamasta ,

May I ask if you have gotten this issue resolved?

If it is solved, please mark the helpful reply or share your solution and accept it as solution, it will be helpful for other members of the community who have similar problems as yours to solve it faster.

Please don't forget to give a "Kudos " – I’d truly appreciate it!

Regards,

B Manikanteswara Reddy

[andrewsommer]

I would not give them any access to the workspace, it is unnecessary and thus follow the rule of least privilege. 

The only thing you need to do is grant them "build" permission on the semantic model, that is what you are missing. Then your RLS will still be applied in that case, but they can build their own stuff.

They will still not see the model in the workspace; but they can connect to it from Power BI desktop or Excel.

Please mark this post as solution if it helps you. Appreciate Kudos.

[BhavinVyas3003]

• Keep users as Viewer in the workspace.
• Go to the dataset settings → Manage Permissions.
• Grant them Build permission explicitly.
• Share the dataset link directly with them, or have them connect via Excel using Power BI Datasets connector.