Security on a report which is based on a dataset with Row level security

[Anonymous]

Hi 

I have created an App in Workspace B which is based on a DataSet in Workspace A. This DataSet has got RLS implemented. 

Users, which are member of the RLS groups and member of the App group, can not see data in the App. Testing the App works as designed.

What's wrong?

Thanks for help

Christian

Workspace A:

DataSet -

Group DS1 is allowed to see data for Key 1

Group DS2 is allowed to see data for Key 2

Workspace B:

App -

Group AppB is allowed to see App B

Users in this group should see the App and containing data according to their DS-Group

[ibarrau · Accepted solution]

Hi. If you split your dataset and your report (later App) in two different workspaces, the users in the App should have at least "Read Access" (Viewer) to the dataset in the other workspaces in order to let them see the data. Group AppB should be at least Viewers on the Workspace A.

I hope that make sense

[v-luwang-msft]

Hi @Anonymous ,

Has your problem been solved, if so, please consider Accept a correct reply as the solution or share your own solution to help others find it.

Best Regards
Lucien

[v-luwang-msft]

Hi @Anonymous ,

Try to download the pbix file ,view if you configure the below:

And you could try to view as role:

Is the current situation that you can't see the data or you can still see all the data after configuring rls.

refer:https://docs.microsoft.com/en-us/power-bi/guidance/rls-guidance 

https://community.powerbi.com/t5/Service/RLS-and-Published-App/m-p/1129442 

Best Regards

Lucien

[Anonymous]

All that was set correctly and worked fine in the desktop app...

[Anonymous]

@ibarrau

Hi, it seems as if that is not working yet.

Scenario:

User A is member of Group DS1 (for DataSet) - 

So he should see Data for Key 1 in the DataSet

User A is also member of Group App B (for App B, which is based on the above DataSet) -

So he should see App B - and in that App all Data for Key 1

Group App B has now Viewer rights on the DataSet Workspace

[ibarrau · Accepted solution]

Hi. If you split your dataset and your report (later App) in two different workspaces, the users in the App should have at least "Read Access" (Viewer) to the dataset in the other workspaces in order to let them see the data. Group AppB should be at least Viewers on the Workspace A.

I hope that make sense

[Anonymous · Accepted solution]

Hi @ibarrau !

Almost... I found that the roles used for the apps need to have "Read, Build" on the dataset itself. Access to the DataSet Workspace does not seem to be necessary.

That way it works for me.

Thanks for your hints, you pushed me into the right direction 😉