Forum Discussion

AlexRowl's avatar
AlexRowl
New Member
2 years ago
Solved

RLS in enterprise workspace

Hi,

 

I have a report created based on D365FO data consolidated into a SQL view. It has a field called RLS that contains a department and legal entity as that is the toggle for security in this case. Basically anyone with the puchasing department based in a certain country can have access to the report rows where the legel entity = 0010

I then have another view for RLS where each user is listed with the legal entity, department and these two combined to create a string for RLS

I then have a relationship setup between the two tables based on the fields RLS as below.

 

I have then created a role as below.

 

 

 

I then view as a user and it is filtering correctly as below and only showing the rows where the userprincipalnames matches the email address from the RLS view

 

When I publish this report without the RLS then it is accessible by users and even shows that it is matching the userprincipalname back to the email address in table record when they match, as below based on some measures i created to calculate the userprincipalname and the email address and then an IF statement when the two match or No if not as a doucle check that they were being considered matches.

 

 

However, when I publish it to an enterprise workspace then I get the below error message when the user attempts to log in.

 

 

The user is set up as viewer in the workspace

 

Any sueestions on what I am doing wrong or need to configure?

 

 

Need Help
  • Joe_Barry's avatar
    Joe_Barry
    2 years ago

    Hi AlexRowl 

     

    RLS will not work if someone is a member of a workspace. 

     

    • Remove everyone who isn't developing reports in that workspace
    • In The workspace click on the 3 dots beside the dataset name and choose security
    • You will see the roles on the left and the option to add an email address or a security group. The users who are entered here will be subjected to the RLS rules, others shoudln't see anything

     

    Thanks

    Joe

2 Replies

  • Joe_Barry's avatar
    Joe_Barry
    Icon for Solution Sage rankSolution Sage
    2 years ago

    Hi AlexRowl 

     

    RLS will not work if someone is a member of a workspace. 

     

    • Remove everyone who isn't developing reports in that workspace
    • In The workspace click on the 3 dots beside the dataset name and choose security
    • You will see the roles on the left and the option to add an email address or a security group. The users who are entered here will be subjected to the RLS rules, others shoudln't see anything

     

    Thanks

    Joe

    • AlexRowl's avatar
      AlexRowl
      New Member
      2 years ago

      Hi Joe, Thank you very much for the response, I really appreciate it. I have now got this working.

       

      So I did need to keep the user as a viewer within the workspace. If I did not then I got the below.

       

      However, I added the user into the security section of the semantic model and now they are subject to the RLS and can view the report but not the content that was not applicable.

       

      Thanks

      Alex