Forum Discussion
RLS
- 1 year ago
hi Anonymous , GilbertQ
Thanks for your responses,
I was able to get the RLS working after updating the dataset-level permission from "Read" to "Build," while keeping the workspace-level access as "View only."
After this change, users were able to access the model from Excel, and the report visuals are now displaying correctly instead of appearing blank. - 1 year ago
Hi sajit
Your issue where a user with Row-Level Security (RLS) assigned cannot see the semantic model in the workspace and gets blank visuals typically arises from a combination of workspace permissions and RLS role setup. Although you assigned the user as a Workspace Viewer, this role alone does not grant sufficient access to the underlying dataset or semantic model—it only lets them view reports and dashboards but not the dataset itself. For RLS to work properly, users must have at least Build permission on the dataset or be granted access through roles that allow dataset consumption with RLS filters applied.
Your RLS implementation using a security table(SecurityDepartment) with a DAX filter on USERPRINCIPALNAME()
and correct relationships is the right approach. However, for users to see filtered data:
-
Workspace Permissions: Ensure users have Build or Member role in the workspace or are directly assigned permissions on the dataset. Viewer role restricts dataset visibility, which can cause blank visuals.
-
RLS Role Assignment: Assign the RLS role directly to users within the Power BI service dataset security settings, not just in the model.
-
Dataflow Inclusion: Since your security table is from a dataflow, verify the dataset refreshes properly to include latest security mappings.
-
Test with ‘View as Role’: Use the “View as Role” feature in Power BI Desktop or Service to confirm that the RLS filter behaves as expected for the user.
Correct RLS requires appropriate workspace or dataset permissions alongside the RLS role assignment. Giving users Viewer access only won’t allow them to see filtered data; they need Build permissions or higher to interact with the semantic model and see visuals populated by RLS. Adjusting these permissions and validating role assignments should resolve the blank visual issue.
-
Hi sajit,
Great to hear that it's working as expected on your end! Could you please Post the solution and accept as solution? It would be really helpful for others in the community who might be facing similar issues and can address them quickly. Also, I would suggest accepting your approach as the solution so that it can benefit others as well.
Thank you & regards,
Prasanna Kumar