Forum Discussion

DJSAM's avatar
DJSAM
Frequent Visitor
5 years ago
Solved

Restricting User Access

I have a workspace setup with an existing report, all users (except the admins) are set to have read acess within the workspace and then I have RLS setup to split the users so they only see data for ...
Data Protection
  • v-robertq-msft's avatar
    v-robertq-msft
    5 years ago

    Hi, DJSAM 

    In my opinion, the RLS is designed for making the viewers of this report restricted by their role. If you give them the view permission and don’t give them a role in RLS, they can see all the data without restriction. You can keep in mind: the RLS only works for the viewers of the report who don’t have “Build permission” to the underlined dataset. If the end-users get “Build permission” to the dataset, RLS can’t work on them anymore.

    Add all the users you want to invite to a Security group and add this group to the RLS role may meet your requirement. You can check this video:

    https://guyinacube.com/2020/02/25/can-you-use-groups-with-power-bi-row-level-security-rls/

     

    Best Regards,

    Community Support Team _Robert Qin

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

darentengmfs's avatar
darentengmfs
Post Prodigy
5 years ago

DJSAM 

 

I think you should not add them to the workspace. You should instead share the reports to the people that should have restricted data. I believe if you add people to workspaces, they have full access to data, regardless of setting up RLS.

  • DJSAM's avatar
    DJSAM
    Frequent Visitor
    5 years ago

    Thanks, as mentioned in the response above if the users have the right permission level (just viewer) they will not be able to access the dataset if an RLS group has been created and they're not assigned to it. I just made a mistake in not realising that the user who tested it had contributor permissions.