Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Find everything you need to get certified on Fabric—skills challenges, live sessions, exam prep, role guidance, and more. Get started

Reply
svp1000
Frequent Visitor

The report cannot be viewed because the underlying dataset uses row level security

Hi All,

 

I need some help with this issue I am facing. So I used userprinciplename() and set up rls on PowerBI desktop and it works fine on the desktop when i use modeling -> view as -> username.

 

I published the report on a brand new workspace and gave viewer access to the workspace to one colleague as a test and shared a link to the report. He is getting this error "The report cannot be viewed because the underlying dataset uses row level security". Now I know that I can add them to the semantic model -> security -> add the person and they will have access but what if I eventually need to have 7000 users, will i need to give access to 7000 users individually if there is no active directory that exists for this group?

1 ACCEPTED SOLUTION
djurecicK2
Super User
Super User

Hi @svp1000 

 

 will i need to give access to 7000 users individually if there is no active directory that exists for this group?

 

Yes, you will need to do this if you do not use groups. You should use groups.

 

You can use the following groups to set up row-level security.

 

Here is more information:

 

https://learn.microsoft.com/en-us/fabric/security/service-admin-row-level-security#working-with-memb...

 

https://guyinacube.com/2020/02/25/can-you-use-groups-with-power-bi-row-level-security-rls/

 

 

View solution in original post

2 REPLIES 2
v-yohua-msft
Community Support
Community Support

Hi, @svp1000 

Thanks for the reply from @djurecicK2 , please allow me to provide addition:

You can also try optimizing RLS, RLS filters can affect query performance, so it's critical to design your model efficiently.
Apply RLS filters primarily to dimension-type tables, which are typically small and contain attributes such as user, department, or region. Fact-type tables, which contain transactional data, should have fewer RLS filters.
Make sure your relationship is well-designed, as RLS filters spread through relationships. Follow the principles of star schema and maintain clear relationships between tables.

 

How to Get Your Question Answered Quickly 

Best Regards

Yongkang Hua

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

djurecicK2
Super User
Super User

Hi @svp1000 

 

 will i need to give access to 7000 users individually if there is no active directory that exists for this group?

 

Yes, you will need to do this if you do not use groups. You should use groups.

 

You can use the following groups to set up row-level security.

 

Here is more information:

 

https://learn.microsoft.com/en-us/fabric/security/service-admin-row-level-security#working-with-memb...

 

https://guyinacube.com/2020/02/25/can-you-use-groups-with-power-bi-row-level-security-rls/

 

 

Helpful resources

Announcements
Europe Fabric Conference

Europe’s largest Microsoft Fabric Community Conference

Join the community in Stockholm for expert Microsoft Fabric learning including a very exciting keynote from Arun Ulag, Corporate Vice President, Azure Data.

AugPowerBI_Carousel

Power BI Monthly Update - August 2024

Check out the August 2024 Power BI update to learn about new features.

August Carousel

Fabric Community Update - August 2024

Find out what's new and trending in the Fabric Community.

Top Solution Authors