RLS security working in desktop but not service despite users being assigned to roles

[po]

Hi,

Have a report and RLS working in desktop and when test the role in service data shows as expected.

However when view in the service logged in as user concerned (test user) it doesn't work when view either as that user in workspace or app - it shows all rows despite the user being assigned to that.

Any thoughts as to why this woudl be the case?

Thanks

[cc1026ly]

@JirkaZ 

I also facing the same situation

after setting up the role and assign user to roles, the test user still can see all rows unlike testing the result restricted by RLS in pbi desktop. 
May I know any thoughts on this ?

[JirkaZ]

It would help to know your RLS setup - what and where did you set up?

[Burningsuit · Accepted solution]

Hi @po 

This is probably happening because the user (test user) has access to the workspace as either an Admin, Member or Contributor. These Workspace users are NOT subject to RLS so will see all data. You need to user to be a "Viewer" in the Workspace to be subject to RLS. Go to the Access options in the workspace and set the test user to "Viewer".

Hope this helps

Stuart

[po]

Hi,

Thanks for all replies

Got it working by setting the test user to viewer in the workspace with datasets and then publishing the app which bult against the reports workspace with the security applied to the datasets workspace in the service.

Do you know if any plans to allow RLS and users to have the option to amend/create ther own reports?

This seems a rather big limitation of RLS if only users can view reports can have RLS appplied to them.

Woudl like users to also have the ability to edit the reports/create new reports in certain workspaces.

Thanks

[po]

Hi,

Thanks for updates.

We set up RLS in power bi desktop.

The user is set up as viewer on the workspace which has the datsets in it and viewer on the reports workspace which are created using these datasets.

They still see all rows despite testing the role in thes servce showing just the limited roles.

Thanks

[JirkaZ]

Apart from this you also need to add the user to the correct RLS group in the dataset's Security settings in the service.