Forum Discussion
Row Level Security LWS
Anonymous You have to add the user into an RLS role at the dataset. With Dynamic RLS that is generally a role that implements a filter on a security table like [Email] = USERPRINCIPALNAME()
Anonymous
(1) Dynamic Hierarchical Row Level Security - Microsoft Power BI Community
So, you generally have a table like the following:
Email
etc.
You create a Role (RLS role) and the role has an expression like:
[Email] = USERPRINCIPALNAME
Meaning that users in this Role can only see their own row. This row is then linked (related) to the rest of your data in your other tables meaning that only related rows to this single row are visible to the person in the RLS role.
You publish the dataset. Then, in the Security for the dataset in the Service you add users to this Role. Now, when they view reports based on the dataset, they only see their own information. Now, the caveat is that you do NOT want to add those users to the workspace because that overrides RLS.
hi Anonymous
This is probabaly because of the access permission your users have in the Workspace. If they have Workspace access, either as Admin, Member or Contributor, they are not subject to RLS and will see ALL the data. Only Viewers are subject to RLS in the Workspace. This feeds through to Apps too. If they are Admin, Member or Contributor on the Workspace the App is built from they will see ALL the data in the App. Only Viewers, or users not given Workspace access are subject to RLS in the associated App.
Remove the users access to the Workspace and they will be subject to RLS in the App.
Hope this helps
Stuart
Anonymous You have to add the user into an RLS role at the dataset. With Dynamic RLS that is generally a role that implements a filter on a security table like [Email] = USERPRINCIPALNAME()
Thanks Greg.
Can you please confrim the below ?
I have added the users in to RLS role still users not able to see they own data when user run the report as default but when user goes to dataset level with apply Security then only user able to see the they own data . we need when user run report first time the user want to see own data with out apply dataset security level manually each and every time . please confirm on the same.
Thanks,
Raghu
Anonymous / Greg_Deckler
Did you ever get this figured out? I am trying to implement RLS but my problem is that every week a new report is generated and thus a new dataset is generated. Is there a way to get my 70 user list from the security settings of one dataset to the one generated the follow week for the next instance of the report?
And if not, is there a way to update my dataset on the Service with the refreshed data of the desktop application the following week, assuming i keep the same filename, without losing the security list and having to rebuild every week?Anonymous Right, you should keep the same file name for where your user list is coming from and just refresh it.
thanks.. yeah.. i think this is the only way to get RLS to work.