RLS in composite mode

[Gianca]

Hi,

I'm tring to set up the RLS in composite model, but seem not working correctly.

I'm also using a Gateway to connect on-prem data.

At first i did a test creating a DataSet and a Report with the RLS .I gave access as Viewer to a my collegue.

He tested that correctly see the data.

Then I created an other report with a composite model connecting to the previous shared Dataset (with the RLS defined before).

The user cannot see anything and the following message is diplayed:

Anyone could help me to understand the problem?

Thank you

Giancarlo

[otravers]

For people ending up on this page via Google, this is no longer needed since April 2022 in Premium workspaces (not sure about the current status for Pro though):

https://powerbi.microsoft.com/en-us/blog/update-to-required-permissions-when-using-composite-models-...

[Gianca · Accepted solution]

Hi,

           I've found the solution and the problem wasn't strictly related to the RLS, but to the composite model.

In the composite Model you have the shared dataset + the report dataset

You need to define security as follow:

Shared Dataset  as  Viewer+Build

Report dataset as Viewer

Here the article that helped me:

https://www.sqlbi.com/blog/marco/2021/06/03/setting-the-right-permissions-for-users-of-composite-mod...

Thanks

Giancarlo

[Anonymous]

Hi @Gianca ,

It would be great if you could provide more details.
What is your data source? Which two connection modes are you using for your composite model?
Generally, this type of error occurs when users are using DirectQuery for Power BI datasets and Azure Analysis Services .
There are known limitations：

• RLS rules will be applied on the source on which they are defined, but will not be applied to any other datasets in the model. RLS defined in the report will not be applied to remote sources, and RLS set on remote sources will not be applied to other data sources. Also, you cannot define RLS on a table from another source group nor can you define RLS on a local table that has a relationship to another source group.

• KPIs, row level security, and translations will not be imported from the source in this preview release.

• Users need 'Build' permissions on all datasets in the chain to access a report that leverages this feature.

For more，you can see：Considerations and limitations 

Best Regards,
Community Support Team _ Caitlyn

If this post helps then please consider Accept it as the solution to help the other members find it more quickly.