Forum Discussion
Using RLS with Datasets
I have a dashboard/report that uses a pbi dataset to connect all my tables. The dataset houses about 15 tables. The dasboard will be located in a workspace and shared out to groups. RLS is required because certain groups can only view their data based on their email address. As of right now, I cannot get RLS to work properly. I have never used RLS while being connected to a dataset (I've only used RLS with dashboards that directly connect to the datasource like SQL or Snowflake). I researched and researched and cannot find any troubleshooting articles. How are you supposed to implement RLS while using a dataset?
RLS should be defined in the parent dataset, not in the Live Connection report. If memory serves you can't use the security settings RLS test functionality with Live Connection report, you'll have to test accessing the report with one of the RLS'd users (make sure they're a Viewer in the workspace).
Yep, you'll have to test RLS in the workspace, the Live Connection will inherit RLS rules from the parent dataset since they're part of the data model.
https://docs.microsoft.com/en-us/power-bi/enterprise/service-admin-rls
14 Replies
I wrote an entry that hopefully will help you understand how RLS works:
https://www.oliviertravers.com/row-level-security-rls-business-intelligence/
Can you elaborate on what you've done so far and how you're diagnosing that RLS is not working properly?
Description: We've added 1) the appropriate table and relationship to the dataset 2) roles to the dataset which define the rls 3) linked the dashboard to the dataset 4) defined blank roles in the dashboard. The RLS works in the dataset file itself. The RLS does not work in the dashboard which is linked to the dataset. I have tried making the user we are testing someone with build access to the dataset and testing their permissions in the service. This does give them access to the dashboard.
This is working as intended, only users with the Viewer workspace role have RLS applied to them. Everyone who is Member or above will see everything.
You can test what RLS does in a report from the Security settings of the dataset and preview the result in reports (but not dashboards, they're not listed there).
