Check your eligibility for this 50% exam voucher offer and join us for free live learning sessions to get prepared for Exam DP-700.
Get StartedDon't miss out! 2025 Microsoft Fabric Community Conference, March 31 - April 2, Las Vegas, Nevada. Use code MSCUST for a $150 discount. Prices go up February 11th. Register now.
Hi All,
I need some help with this issue I am facing. So I used userprinciplename() and set up rls on PowerBI desktop and it works fine on the desktop when i use modeling -> view as -> username.
I published the report on a brand new workspace and gave viewer access to the workspace to one colleague as a test and shared a link to the report. He is getting this error "The report cannot be viewed because the underlying dataset uses row level security". Now I know that I can add them to the semantic model -> security -> add the person and they will have access but what if I eventually need to have 7000 users, will i need to give access to 7000 users individually if there is no active directory that exists for this group?
Solved! Go to Solution.
Hi @svp1000
will i need to give access to 7000 users individually if there is no active directory that exists for this group?
Yes, you will need to do this if you do not use groups. You should use groups.
You can use the following groups to set up row-level security.
Here is more information:
https://guyinacube.com/2020/02/25/can-you-use-groups-with-power-bi-row-level-security-rls/
Hi, @svp1000
Thanks for the reply from @djurecicK2 , please allow me to provide addition:
You can also try optimizing RLS, RLS filters can affect query performance, so it's critical to design your model efficiently.
Apply RLS filters primarily to dimension-type tables, which are typically small and contain attributes such as user, department, or region. Fact-type tables, which contain transactional data, should have fewer RLS filters.
Make sure your relationship is well-designed, as RLS filters spread through relationships. Follow the principles of star schema and maintain clear relationships between tables.
How to Get Your Question Answered Quickly
Best Regards
Yongkang Hua
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Hi @svp1000
will i need to give access to 7000 users individually if there is no active directory that exists for this group?
Yes, you will need to do this if you do not use groups. You should use groups.
You can use the following groups to set up row-level security.
Here is more information:
https://guyinacube.com/2020/02/25/can-you-use-groups-with-power-bi-row-level-security-rls/
User | Count |
---|---|
25 | |
21 | |
11 | |
11 | |
10 |
User | Count |
---|---|
50 | |
31 | |
20 | |
18 | |
15 |