Forum Discussion
RLS not working on shared model
Grant Build permission on Workspace A model to Report B users
Ensure SSO enabled on the AAS connection (OAuth)
Users must be assigned to RLS roles in Workspace A model (Dataset > Security)
If this answer helped, please click Kudos or Accept as Solution.
-Kedar
LinkedIn: https://www.linkedin.com/in/kedar-pande
Hi Luuk_,
Thank you Kedar_Pande for your points.
When you modify Report B, Power BI creates a local composite semantic model, so the report is no longer directly connected to the shared model in Workspace A. Instead, it queries the shared model through this new local model. For this setup to function, users need Build permission on the original dataset, since a composite model extends or reuses the underlying dataset with custom modeling logic. Without Build permission, Power BI blocks users from querying the shared dataset via another model, which also interferes with RLS. Essentially, Build permission is necessary because creating a composite model means you are building on top of the shared dataset, and Power BI enforces this to ensure proper security and query handling.
Thank you and continue using Microsoft Fabric Communiy Forum.