Row Level Security

[KH_Mike]

I am now reading those RLS realted material and not fully understand. Please help to clarify if I am wrong.

Setting

PBI Dataset with RLS also set and uploaded to PBI Service. Report is connecting to that PBI Dataset and upload to the same PBI Service.

1. For those "Viewer" in the workspace. Will they able to access all data? If yes, is there any simple way to just set those "Viewer" instead of adding that into specific role one by one?

2. For the Report, I use "Share" function to some user already. If they haven't assign to specific Role. Will they able to access all data? If yes, that mean I need perform the sharing two times (One is assign them under Security and share the report)?

3. Why I can't assign the "Role" in dataset when the dataset is on "My Workspace"?

4. Any tips to use the RLS?

[v-yalanwu-msft]

Hi, @KH_Mike ;

Is the above answer helpful to you? If so, Would you mind accept the helpful replies as solutions? Then we are able to close the thread. More people who have the same requirement will find the solution quickly and benefit here. Thank you.

Best Regards,
Community Support Team_ Yalan Wu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[ibarrau · Accepted solution]

Hi! let's see. First of all let me clarify something. Once you have turned on a rule in RLS for a dataset, the shared or viewer users must be assigned to a role in order to see data. Otherwise they will see an error. The members or admins with build permission won't need it because they can edit (they are like admins for the dataset).

1. Viewers can only read data. If you have configured RLS they will see all data in dataset involved in the role.

2. They must be asigned in a role. If you have RLS configure and you want a shared or viewer to see all data without role restrictions you can create a new Role in Desktop without any rule. That one will be a role that can watch everything.

3. Because RLS is a pro feature that works in collaboration. "My Workspace", like the name says, is a personal space to test features for you and only for you.

4. Sure, you can check this blog post to understand how to build a dynamic RLS to avoid creating hundreds of rules and assignments https://blog.ladataweb.com.ar/post/652895563673649152/powerbi-seguridad-de-filas-rls-con-regla

I hope that helps,