Row Level security not working in power bi service while its working in desktop version

[gk124]

Hi All,

I have created a dashboard which shows the number of covers given to each person while they are on leave and the report is getting RLS function working while checking the view role option in desktop version.

Below screenshot is the DAX expression used for filtering the dynamic RLS.

DAX expression 

Below is the screenshot of desktop view which is filtering the data -

Desktop view

Below is the power Bi service view which is not filtering the data - 

Service view

and below screenshot is the access granted in RLS power bi service -

RLS access

Now kindly advice why this RLS filtering is not happening in powerbi service view?

@Anonymous 

[Anonymous]

Hi @gk124 ,

If the user used to have a different role in the workspace than the viewer, then RLS does not seem to be able to work for them in that workspace, even if the workspace access level is changed.It's by design. In this case, In addition to what aj1973 mentioned above,a possible solution is to create a second workspace, add the colleague as a viewer, and then RLS will work fine.

Best regards.
Community Support Team_Caitlyn

Best regards.
Community Support Team_Caitlyn

[aj1973]

@gk124 

If a user has a role other than viewer in a workspace where the dataset is located then RLS won't work

[gk124]

Hi Amine,

Thanks for your reply, as you can see I have created 2 RLS one for page level and another one for user level.

What is the solution for this - If a user has a role other than viewer in a workspace where the dataset is located then RLS won't work

[aj1973]

Hi,

Technically End users can't be added to a workspace. End users should consume reports or dashboards in Apps environment and given access permission to dataset on a read only.

[gk124]

You mean to say that I should delete the access granted to these people in below image from RLS ?

[aj1973]

Not from RLS, but from the workspace.

As @Anonymous said you might want to create a new workspace and use App environment for end users

[gk124]

Hi,
As per your instructions I have created a new workspace and have added the end user in the RLS options but its not working. The user is able to view the data for all the organisation.
Moreover the dashboard is designed for users within organisation no any external parties will have access to it.

[aj1973]

My doubt is now more focused on the role you have created

Something is wrong in the Role ! is Guha exist in the 2 columns defined in the role? 

Please change || by && in the role.

[gk124]

Hey Sorry for the late reply but its not getting fixed after publishing its still the same ☹️

I am unable to understand if with same DAX expression - 

[Staff Email ID]=USERPRINCIPALNAME() || [Manager Email] = USERPRINCIPALNAME()

I am able to filter & view only the required staff details in desktop version why its not filtering it after publishing it online.

[Anonymous]

Hi @gk124 ,

Make sure your role must be the viewer's role.
Alternatively, try setting up two RLSs for this report, where users can belong to more than one RLS role.

Best regards.
Community Support Team_Caitlyn