Row Level Security on Composite Model

[shwet]

Hello,

In my report, I have connected to SSAS cubes data, Power BI dataset and Sharepoint data.
1.Imported one table of suppliers with Supplier ID from SSAS cube and direct queried other tables from SSAS cubes and created connection on common Key i.e. Supplier ID.
2. Also connected Power BI datasets and Sharepoint data to the Supplier table of SSAS cube.
3. Imported one table of userinformation from other DB where we have users email ID on which I am implementing RLS and connected this table to Suppliers table on Supplier ID key.

This is how I made a modelling.

Implemented RLS on Email field, so that user who is logging in should see only his/her data and not the entire reports data.

I dont understand if there is a issue with modelling or the data sources storage mode as RLS is not working on the report.

Please suggest some solution to this. I am stuck at thi issue since very long and its urgent requirement. 

Thank You!

[Rajesh_Yarlagad]

Hi. 
We have a seamntic Model buiilt with RLS Configured in it
Now users wants to add additional flat files by connecting to this semantic Model. 
I mean to build a composite model (Direct query with model in service + add additional tables). 
As expected, Whatever RLS build in main model works but RLS will not work for additioanl tables imported. This is waht we wanted. But from perfromance point of view, is building composite models a good practice ? 

[ABI_Rufino]

@shwet,

I was able to figure it out. When you have a connection to a Power BI dataset on a composite model, it's a limitation from the tool that you cannot make RLS work on it.

RLS must be created on the dataset that you are connection with, then it will work on your composite model.

https://learn.microsoft.com/en-us/power-bi/transform-model/desktop-composite-models#working-with-a-c...

"RLS rules will be applied on the source on which they're defined, but won't be applied to any other semantic models in the model. RLS defined in the report won't be applied to remote sources, and RLS set on remote sources won't be applied to other data sources. Also, you can't define RLS on a table loaded from a remote source, and RLS defined on local tables will not filter any tables loaded from a remote source."

Regards,

Bernardo Rufino.

[hsantosh]

I am also facing same issue, my report embedded in application, in power BI service its working but not in application. throwing error

An unexpected error has occurred!

[ABI_Rufino]

I have the same exact problem.

My scenario is:

• Power BI Premium Workspace;
• Composite model with:
  • Power BI Dataset Direct Query (AS) - let's call it 'base dataset'
  • Excel file on Sharepoint folder;
    • Only 2 columns: user email and the region that i want to filter;
  • The excel file relationship is with the dimension as a many-to-many, one-directional (excel filters the dimension);
• RLS rule is simple: [user_email] = USERPRINCIPALNAME(), so when user is logged to PBI Service the excel table is filtered and it SHOULD filter the dimensions table, and them filtering the fact table;

RLS works fine if i import the excel file to the 'base dataset'. But i don't want that because it's a shared dataset and RLS will apply only to a few reports, not all of them. So for those that will apply, i've created this composite model, but for some reason the RLS rules are not working (the excel table is being filtered, but the filter is not propagating).

•  

[marcecane]

Hello @ABI_Rufino 
my use case is exactly like yours. Same steps but still no solution. Did you find a solution to propagate the filter to the direct query tables?
Thank you in advance for your eventual reply

[ABI_Rufino]

---

@marcecane wrote:

Hello @ABI_Rufino 
my use case is exactly like yours. Same steps but still no solution. Did you find a solution to propagate the filter to the direct query tables?
Thank you in advance for your eventual reply

---

It's a limitation of the tool.

Details here: https://learn.microsoft.com/en-us/power-bi/transform-model/desktop-composite-models#working-with-a-c...

• RLS rules are applied on the source on which they're defined, but aren't applied to any other semantic models in the model. RLS defined in the report isn't applied to remote sources, and RLS set on remote sources aren't applied to other data sources. Also, you can't define RLS on a table loaded from a remote source, and RLS defined on local tables don't filter any tables loaded from a remote source.

If you are not going to work with embedded like @shwet, then you will need to bring those tables inside your main model, and then to a live connection from the report.

We had a limitation because we wanted to refresh just a few set of tables, and that's why we've built the composite model. But what we did is to bring everything to this unified model and use Power BI REST API to refresh specific tables on the model only (also, on Fabric pipelines you can refresh a semantic model specific table).

[shwet]

Hi,
RLS is still not working for me on composite model, but we have implemented alternate solution which is filtering report by passing query string parameter. Our report is embedded in the external portal so we have added query string parameter in the embed link and its working for the users, we have kept is as a temporary solution for now. You can refer the link below:
Filter a report using query string parameters in the URL - Power BI | Microsoft Learn