RLS not working

[negbc]

I setup RLS in desktop and assigned a user in BI Service in the security settings. I did this for two different reports, defined by the warehouse they work at, one reports works fine and the user has access but the other report is giving user the error that they don't have permissions to see the dataset. I'm not sure what the difference may be, is there something else I should be looking at to ensure they have the correct permissions?

[Anonymous]

Hi @negbc ,

Row-level security (RLS) with Power BI can be used to restrict data access for given users. Filters restrict data access at the row level, and you can define filters within roles. In the Power BI service, users with access to a workspace have access to datasets in that workspace. RLS only restricts data access for users with Viewer permissions. It doesn't apply to Admins, Members, or Contributors.

When you set the RLS for user and share the related report with user, the RLS policy will working.

If want to add many user to the RLS, you could create group and add user to group, then add group to the RLS

You can use the following groups to set up row level security.

• Distribution Group
• Mail-enabled Group
• Azure Active Directory Security Group

Note, however, that Microsoft 365 groups aren't supported and can't be added to any roles.

For more details, you can read related document: Row-level security (RLS) with Power BI - Power BI | Microsoft Learn

Best regards,
Community Support Team_Binbin Yu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[JohnnySaade]

Inserting a user's name in the security settings of the report will not give user access to the report, can you please double check if you share the report with the user as well?

[negbc]

They are given a link to the report. I believe I figured it out and how to my data is modelled. But I don't belive they need to be shared to the workspace.

[JohnnySaade · Accepted solution]

You are correct, users' workspace access isn't a requirement to manage their RLS as long as they have access to the report.

[negbc]

Is that a must? Some users are able to access the report without being shared to the workspace? Additionally, if I need to share these reports to 100 people I need to manually add those users to the workspace as well as RLS?

[Brunner_BI]

The users also need to have "Viewer" in the workspace where the dataset resides.