RLS not working with Contributor Permission on Workspace

[wshahzad]

Hi Guys,

1. For contributor role a user can still fetch the records on which the RLS is implmented when the user is creating new reports from shared dataset in the shared workspace. RLS only works when we views as role.

Can someone huide me what i am doing wrong.

[v-kelly-msft · Accepted solution]

Hi  @wshahzad ,

Using RLS with workspaces in Power BI

If you publish your Power BI Desktop report to a workspace within the Power BI service, the roles will be applied to read-only members. You will need to indicate that members can only view Power BI content within the workspace settings.

If you hope the user can also edit the report,you can copy the report to another workspace where you dont set RLS to him and just show the information which he can see.

Here is the reference:

https://docs.microsoft.com/en-us/power-bi/connect-data/service-datasets-copy-reports

Best Regards,
Kelly

Did I answer your question? Mark my post as a solution!

[hansei]

Is there a method whereby a user can refresh a dataset, but not view the report? We have sensitive reports that we want technical users to be allowed only to refresh/schedule. With current permissions, they require contributor+ in order to do so, which negates any RLS

[GilbertQ]

Hi there

You would need to change the role for the user from contributor to viewer role

[wshahzad]

Hi,

But if i want the user to be creating his own reports from the shared dataset while the RLS is implmented so when the user creates his report he can only see the data as per the RLS. How can this be done ?

[GilbertQ]

Hi there

The user would need to be in another App Workspace where he would connect to the shared dataset in order for this to work.

[wshahzad]

Hi,

Thanks. Can you point me to any documentation where this is described in detail. 

[GilbertQ]

Hi there

here are more details https://docs.microsoft.com/en-us/power-bi/connect-data/service-datasets-build-permissions