Forum Discussion
Roles not working correctly
Hey WEB3 ,
if you publish your Power BI Desktop file to the workspace, with Row Level Security (RLS) implemented it's essential to understand, that RLS will not apllied if users are accessing the content from inside the workspace.
You have to create an app from the contents of the workspace and grant users access to the app, instead of adding users to the workspace.
I always recommend that only users who are creating content (reports and dashboards) should be added to the workspace.
There is only situation where RLS will be applied if content is accessed from inside a workspace and not via the app, and this is when users have been the Viewer role assigned.
Remove users who are only content consumers from the workspace and provide these users access to the app.
Hopefully, this helps to tackle your challenge.
Regards,
Tom
Hi Eric,
The other users in the workspace need to be "Viewers" only. Then they will be subjecty to Row Level Security. If you have users in the Workspace that are "Members" "Contrubutors" or "Admin" they are not subject to Row Level Security so they will see all data.
Hope this helps
Stuart
Hi Burningsuit ,
Unfortunately that has no effect. The users that I have now set as Viewer still have access to all data.
Eric
Hi Eric,
If your RLS is testing correctly, it may be that the Viewers on the workspace still have "build" rights on the Dataset, which defeats RLS.
To test this, remove one of the viewer accounts from the Workspace completely. Then share the Report with them using the "share" dialog, so that the report is in their "Shared with me" folder. Then see if the user is subject to RLS on that report. They should see the data subject to RLS, if they see the whole data, then your RLS code is wrong. Add them back as a "viewer" to the Workspace and test again.
Hope this helps
Stuart
Hi Stuart,
Thanks for your reply.
I made an app for the dataset. After this, the access rights worked correctly!
Eric