Forum Discussion

sajit's avatar
sajit
Frequent Visitor
1 year ago
Solved

RLS

Problem Summary: I've implemented Row-Level Security (RLS) on a Power BI semantic model, but the assigned user cannot see the semantic model in the workspace and gets blank visuals when accessing rep...
  • sajit's avatar
    1 year ago

    hi Anonymous , GilbertQ 
    Thanks for your responses, 
    I was able to get the RLS working after updating the dataset-level permission from "Read" to "Build," while keeping the workspace-level access as "View only."
    After this change, users were able to access the model from Excel, and the report visuals are now displaying correctly instead of appearing blank.

  • Poojara_D12's avatar
    1 year ago

    Hi sajit 

    Your issue where a user with Row-Level Security (RLS) assigned cannot see the semantic model in the workspace and gets blank visuals typically arises from a combination of workspace permissions and RLS role setup. Although you assigned the user as a Workspace Viewer, this role alone does not grant sufficient access to the underlying dataset or semantic model—it only lets them view reports and dashboards but not the dataset itself. For RLS to work properly, users must have at least Build permission on the dataset or be granted access through roles that allow dataset consumption with RLS filters applied.

    Your RLS implementation using a security table(SecurityDepartment) with a DAX filter on USERPRINCIPALNAME()

     and correct relationships is the right approach. However, for users to see filtered data:

    1. Workspace Permissions: Ensure users have Build or Member role in the workspace or are directly assigned permissions on the dataset. Viewer role restricts dataset visibility, which can cause blank visuals.

    2. RLS Role Assignment: Assign the RLS role directly to users within the Power BI service dataset security settings, not just in the model.

    3. Dataflow Inclusion: Since your security table is from a dataflow, verify the dataset refreshes properly to include latest security mappings.

    4. Test with ‘View as Role’: Use the “View as Role” feature in Power BI Desktop or Service to confirm that the RLS filter behaves as expected for the user.

    Correct RLS requires appropriate workspace or dataset permissions alongside the RLS role assignment. Giving users Viewer access only won’t allow them to see filtered data; they need Build permissions or higher to interact with the semantic model and see visuals populated by RLS. Adjusting these permissions and validating role assignments should resolve the blank visual issue.