Microsoft Fabric Community Conference 2025, March 31 - April 2, Las Vegas, Nevada. Use code MSCUST for a $150 discount.
Register nowThe Power BI DataViz World Championships are on! With four chances to enter, you could win a spot in the LIVE Grand Finale in Las Vegas. Show off your skills.
Hi,
Have a report and RLS working in desktop and when test the role in service data shows as expected.
However when view in the service logged in as user concerned (test user) it doesn't work when view either as that user in workspace or app - it shows all rows despite the user being assigned to that.
Any thoughts as to why this woudl be the case?
Thanks
Solved! Go to Solution.
Hi @po
This is probably happening because the user (test user) has access to the workspace as either an Admin, Member or Contributor. These Workspace users are NOT subject to RLS so will see all data. You need to user to be a "Viewer" in the Workspace to be subject to RLS. Go to the Access options in the workspace and set the test user to "Viewer".
Hope this helps
Stuart
I also facing the same situation
after setting up the role and assign user to roles, the test user still can see all rows unlike testing the result restricted by RLS in pbi desktop.
May I know any thoughts on this ?
It would help to know your RLS setup - what and where did you set up?
Hi @po
This is probably happening because the user (test user) has access to the workspace as either an Admin, Member or Contributor. These Workspace users are NOT subject to RLS so will see all data. You need to user to be a "Viewer" in the Workspace to be subject to RLS. Go to the Access options in the workspace and set the test user to "Viewer".
Hope this helps
Stuart
Hi,
Thanks for all replies
Got it working by setting the test user to viewer in the workspace with datasets and then publishing the app which bult against the reports workspace with the security applied to the datasets workspace in the service.
Do you know if any plans to allow RLS and users to have the option to amend/create ther own reports?
This seems a rather big limitation of RLS if only users can view reports can have RLS appplied to them.
Woudl like users to also have the ability to edit the reports/create new reports in certain workspaces.
Thanks
Hi,
Thanks for updates.
We set up RLS in power bi desktop.
The user is set up as viewer on the workspace which has the datsets in it and viewer on the reports workspace which are created using these datasets.
They still see all rows despite testing the role in thes servce showing just the limited roles.
Thanks
Apart from this you also need to add the user to the correct RLS group in the dataset's Security settings in the service.