Test RLS(Row Level Security) on Power BI Service in MS Fabric

[ShivaniTyagi01]

Hi,

I am new to MS fabric. I created a Report of customers for my organization in Power BI desktop, tested the RLS on Desktop and it is working fine. But after publishing the report to Power BI service of MS Fabric , I want to test RLS, but I get this error - 

Not supported

Test as role does not work with Single Sign-On (SSO).

Please try again later or contact support. If you contact support, please provide these details.See details The storage mode I am using is mixed (both Direct Query and Import). I learnt that if you are using direct Query then you should disable SSO to test RLS.  Can anyone please let me know how to do that ? Or is there any other workaround that I can do ?

Thanks,

Shivani Tyagi

[SudhavaniKolla3 · Accepted solution]

click on 3 dots of dataset, select settings and click on Gateway and cloud connections, under cloud connections,  take "create new connection>just give any name to the connection and create. later map the new created conentcion to that dataset under same gateway and cloud connections
it will work

now map the new created connection to that dataset and apply. it will work

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[Anonymous · Accepted solution]

Hi, SudhavaniKolla3 ,thanks for your concern about this issue.

Your answer is excellent!
And I would like to share some additional solutions below.
Hello,@ShivaniTyagi01 .I am glad to help you.
I think SudhavaniKolla3's suggestion is very good :
Reconfigure a Data Source Gateway connection for the data source instead of the SSO data source that was originally configured.
In fact, there is a functionality conflict between RLS and Single Sign-On in Direct Query link mode. The official documentation points this out
When SSO is enabled, Power BI automatically logs into the datasource using the user's current authentication information, which prevents the ‘Test as role’ feature from working correctly because it can't simulate users in different roles.
Therefore, when you are testing RLS, the SSO feature needs to be disabled.

You should also note that RLS has different effects on different types of member roles in a workspace, and that it only takes effect on the Viewer Role in a workspace.
RLS essentially restricts the dataset of a data source, which means that the user's own access to the data source and the assigned RLS Role work together to affect the final presentation.
If you wish to configure dynamic RLS (restricting data based on the user's login username), you need to be aware that Direct Query connection mode does not support dynamic RLS (this is due to the nature of Direct Query connection mode, so if you are using a mixed connection mode, which includes Direct Query connection mode, the RLS functionality will be limited)

I hope you find the following article helpful.
URL:

Solved: RLS on DirectQuery - Microsoft Fabric Community
Row-level security (RLS) with Power BI - Microsoft Fabric | Microsoft Learn

I hope my suggestions give you good ideas, if you have any more questions, please clarify in a follow-up reply.
Best Regards,
Carson Jian,
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[ShivaniTyagi01]

Hi @Anonymous ,

It cleared a lot of stuff around RLS.

Thanks,

Shivani Tyagi

[SudhavaniKolla3 · Accepted solution]

click on 3 dots of dataset, select settings and click on Gateway and cloud connections, under cloud connections,  take "create new connection>just give any name to the connection and create. later map the new created conentcion to that dataset under same gateway and cloud connections
it will work

now map the new created connection to that dataset and apply. it will work

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[ShivaniTyagi01]

Hi @SudhavaniKolla3 ,

Thanks for the solution! It worked like magic 🙂

Thanks,

Shivani Tyagi