Row-Level Security in App doesn't match Workspace

[ldsmith919]

I have read all the Microsoft documentation on this topic, but cannot seem to find an answer to my question.

Situation: I am trying to limit the data visible in a published Power BI app based on a user's division, however the visible data is displaying correctly in the app when I had them test it.

Example: Let's take the following sample table:

Division	Sales
A	$10
B	$20

I have applied row-level security to the semantic model such that my test user is in division A and the testing in PBI desktop does in fact show $10 in sales as expected.

When I test in the PBI Service however, I get the below results.  I would have expected at least one of these scenarios to result in the correct sales value ($10), but that does not seem to be the case.

Workspace Access	Report Sales Value	App Access	App Sales Value
Viewer	$10	granted as workspace user	$30
None	N/A	added individually	$30

I know that the app is just a display for the reports in a workspace and the audiences just limit which reports can be seen.  I also know row-level security is applied at the semantic model level.  My question is how to make the the correct sales values show the app?  (What roles or access needs to be given in the workspace and/or app to ensure this displays correctly?)

[GilbertQ]

Hi @ldsmith919 

Can you confirm that you have put the user also into the role in the power bi service?

[ldsmith919]

Yes, we have a security group which includes all members of the user's team (including the user) that was added as a member to the role.

[ldsmith919 · Accepted solution]

In retracing steps, I found my issue and will detail here in case anyone else has the same problem.  There were two reports in my workspace: the original and the one with row-level security applied.  I had the original visible in the app and the new RLS hidden, so naturally the RLS would not apply in the app.

Steps to check:

• Are you testing the correct report in both the workspace and app?
• What access does user have in the workspace?
• What access does user have in the app?
• Is user included as member or in group of members assigned to role?