Hi everyone,
We have a number of reports that use RLS and perspectives to control which data different user groups are able to view. We recently had need to share a dataset with one of these users.
The Power BI documentation here implies that RLS should apply to a dataset if the user is part of an RLS group:
Dataset permissions and row-level security (RLS)
Row-level security may affect the ability of users with read or build permission on a dataset to read data from the dataset.
- When RLS isn't defined on the dataset, users with write, read, or build permission on the dataset can read data from the dataset.
- When RLS is defined on the dataset:
- Users with only read or build permission on the dataset will not be able to read data from the dataset unless they belong to one of its RLS roles.
- Users with write permission on the dataset will be able to read data from the dataset regardless of whether or not they belong to any of its RLS roles.
However, while testing data sharing through data hub we have found that RLS is not applying, and the test user is able to access the entire dataset. Additionally, perspectives settings we use to hide our measures table and some other fields from users are not applying either.
Does anyone have any advice on whether RLS can be applied to datasets shared through data hub? And if so, how to correctly configure the permission settings?
Additionally, if this is possible, can perspectives be applied too?
Thanks
