Viewer access and RLS

[KaroRoza]

Hello,

I have question about RLS. I have Workspace and App where I publish several reports. One of the report is shared with several Users. So far I have been using Groups to limit access for specific Users ( I had several version of one of the report for different Users). I would like to switch to RLS as it is more effective.

So, I created roles and assgined them to Users.

My question: should I add Users access to Workspace: as Viewer? In that case will they see full content of Workspace? 

I want to give them only access only to the one report (with filtered countries in RLS).

My manager and I should see All reports in the Workspace and be able to extract underlying data.

How should I achieve that? 

Many thanks for help.

[BhavinVyas3003]

To restrict users to only one report with RLS, don’t give them Viewer access to the workspace. Instead, publish the report, set up RLS roles, assign users to those roles in the dataset security, and share access via the App by including only the required report. This ensures users see only filtered data. You and your manager can be workspace Members/Admins to view all reports and extract data.

[KaroRoza]

Thanks,

How should I do this: "assign users to those roles in the dataset security, and share access via the App by including only the required report"?

[BhavinVyas3003 · Accepted solution]

In Power BI Service, go to the dataset → click More options (⋯) > Security → select the RLS role and add users.
Then, go to the workspace → Create/Update App, include only the required report, assign users in the Audience section, and publish.