Subscribe Feature - RLS not applying on image but still applying when end user clicks "Go to Report"

[MDodds]

Hi all,

I have recently been testing out more details on the subscribe feature. My client wants the end users to be able to view my report in the email form, using the subscribe preview image feature, rather than asking end users to navigate to the report in the service to view.

This is fine in theory however the way subscribe interacts with RLS, is that the email goes with the permissions of the person who sets up the subscription rather than the end users permissions.

I have some questions on this:

1. This means the user sees the full data in the preview image, but if they click to "Go to Report" will their set security permissions still apply there? Or do they still see the full report data based on my permissions when now accessing via this link in the service?
2. One way around the preview image issue, is for me to create a duplicate report page for each end user, and then filter results to them before doing the subscription. Given I only have about 15 end users this isn't too ardous. But if I have more this is not going to be a practical solution. Does anyone have any other ways this could be achieved? I tried to play around with Power Automate as well to send as PDFs but ran into similar RLS issues.

Appreciate the help!

[Anonymous · Accepted solution]

Hi @MDodds ,

For your questions:

1  RLS will apply to your subscriptions if customer open your email link to report. But for image, if you don't want customer to see whole data, you can subscribe report after filtering by yourself.

2 you can create  RLS for different customer, for example, dynamic RLS, may be it will meet your needs. This doc for you to refer:

Dynamic Row Level Security (Dynamic RLS) - Microsoft Power BI Community

Best regards,

Community Support Team Selina zhu

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly

[menphis21]

Hi @Anonymous ,

Thank for the help.

I am using dynamic RLS with function (userprincipalname) but i dont understand how the report can be send with the preview picture that contains the filtered data.

DO you have a solution ?

Thanks

[MDodds]

Thanks Selina this is helpful.

I think filtering myself and then one by one subscribing the end users should work for me, given it is only 15.

I will check out your second suggestion for future larger projects.

Cheers