Forum Discussion
RLS in Composite model Error
Hi gavin007
It sounds to be as if the SalesForce data has got a relationship to your other data where the RLS is being applied and that is why it is getting the RLS applied?
What happens if you remove that relationship?
GilbertQ That is just one of the question. I think RSL can apply to Salesforce data because RSL is set up in the employee table in the power bi dateset. This table happen to link to both Salesforce data and the other tables in Pbi dataset.
I did not take out the relationship and check like you suggest as it is working fine now. I thought RLS will not apply to external data in composite model (refer to below workaround). Maybe this bug is fixed now. Can you clarify?
Further question bothering me is assign user role in security window.
In the original power bi dataset, A user has been set up as dynamic role (using UPN) in security window. in the new report based on the Salesforce and Pbi dataset composite model, the same user cannot open the report unless I create a role in Desktop and assign the role to that user. This is like double handling.
The workaround I mentioned before by giving that user Contributor access level is not ideal, but because RLS doesn't apply to Contributor, he can view the report. Here is the interesting part, even RLS in the current workspace doesn't apply to him, but the RLS in the original Pbi STILL APPLY. That is why he can view the report.
I did a further test on report with ONLY Pbi dataset. In this case, I still need to assign a role to the same user although he has got on in the original dataset.
That means any report I create from composite model, I will need to set up a generic role in Desktop and assign user to that role in Service. That is quite a interesting finding.