RLS role and access

[e2liu77]

Hi,

I have implemented RLS in power BI report access control. I have 4 role groups with 4 different filters. But I need to have a group of people who can access without any restriction.

Do I need to create a fifth role group in RLS with "no" filter? Or any one else who has been granted access right to my report but not in any existed 4 Role groups can access "all" data?

[e2liu77 · Accepted solution]

Hi @v-frfei-msft ,

I don't want to grant edit/Admin right to the people who can see the full contents without filters. Even they can read full content, but they should not be able to edit or make any change to my report.

Is it possbile to create a "full" Role in power BI desktop but without setting any filters. Will it work or will it cause any issue?

[v-frfei-msft · Accepted solution]

Hi @e2liu77 ,

Hope this blog could help you.

Regards,

Frank

[v-frfei-msft]

Hi @e2liu77 ,

As the online document, If you publish your Power BI Desktop report to an app workspace within the Power BI service, the roles will be applied to read-only members. So you can change the gourp  as admin to make the users can access all the content.

Reagrds,

Frank

[e2liu77]

Hi @v-frfei-msft and @GilbertQ ,

Thanks for your answer. How to add a user or group of users as Admin?

[v-frfei-msft · Accepted solution]

Hi @e2liu77 ,

Hope this blog could help you.

Regards,

Frank

[v-frfei-msft]

Hi @e2liu77 ,

Edit the workspace and change the role of the user as the picture below. BTW, we cannot add a gourp as a member in app workspace currently. We can just set the specific users as admin one by one.

Regards,

Frank

[e2liu77 · Accepted solution]

Hi @v-frfei-msft ,

I don't want to grant edit/Admin right to the people who can see the full contents without filters. Even they can read full content, but they should not be able to edit or make any change to my report.

Is it possbile to create a "full" Role in power BI desktop but without setting any filters. Will it work or will it cause any issue?

[Anonymous · Accepted solution]

@e2liu77  just create a role with no filters Expressions and add users to that role. They will see full report.

[GilbertQ]

Hi there,

Ideally you should create an Admin Role which means that they could access it all.

What you could also do, is to add the Group as a Write Member of the App Workspace which would grant them Admin access.