Forum Discussion

KH_Mike's avatar
KH_Mike
Helper III
5 years ago
Solved

Row Level Security

I am now reading those RLS realted material and not fully understand. Please help to clarify if I am wrong.   Setting PBI Dataset with RLS also set and uploaded to PBI Service. Report is connectin...
Need Help
  • ibarrau's avatar
    ibarrau
    5 years ago

    Hi! let's see. First of all let me clarify something. Once you have turned on a rule in RLS for a dataset, the shared or viewer users must be assigned to a role in order to see data. Otherwise they will see an error. The members or admins with build permission won't need it because they can edit (they are like admins for the dataset).

    1. Viewers can only read data. If you have configured RLS they will see all data in dataset involved in the role.

    2. They must be asigned in a role. If you have RLS configure and you want a shared or viewer to see all data without role restrictions you can create a new Role in Desktop without any rule. That one will be a role that can watch everything.

    3. Because RLS is a pro feature that works in collaboration. "My Workspace", like the name says, is a personal space to test features for you and only for you.

    4. Sure, you can check this blog post to understand how to build a dynamic RLS to avoid creating hundreds of rules and assignments https://blog.ladataweb.com.ar/post/652895563673649152/powerbi-seguridad-de-filas-rls-con-regla

    I hope that helps,

ibarrau's avatar
ibarrau
Super User
5 years ago

Hi! let's see. First of all let me clarify something. Once you have turned on a rule in RLS for a dataset, the shared or viewer users must be assigned to a role in order to see data. Otherwise they will see an error. The members or admins with build permission won't need it because they can edit (they are like admins for the dataset).

1. Viewers can only read data. If you have configured RLS they will see all data in dataset involved in the role.

2. They must be asigned in a role. If you have RLS configure and you want a shared or viewer to see all data without role restrictions you can create a new Role in Desktop without any rule. That one will be a role that can watch everything.

3. Because RLS is a pro feature that works in collaboration. "My Workspace", like the name says, is a personal space to test features for you and only for you.

4. Sure, you can check this blog post to understand how to build a dynamic RLS to avoid creating hundreds of rules and assignments https://blog.ladataweb.com.ar/post/652895563673649152/powerbi-seguridad-de-filas-rls-con-regla

I hope that helps,