rls

116 Topics

Role Level Security
Hi, I haven't been using power Bi too long and I have a RLS question. I tried using Claude but with no success. My question is as followed: I have a stats table with the following fields: Period, TkD, Name, Hours and Amount. When user A logs in, I only want user A to see his information along with user B and C. When user B logs in, I only want user B to see his own info and no one else. User C can see everyone's information including his own. What do I need to do to set up this kind of RLS? Thanks. Jack
Solved
Phantom1980
2 months ago Place Report Server
1KViews
0likes
5Comments
PowerBI January 2026 Update - On-Premise Reporting Server
I have noticed a bug with RLS Pbix files, where the normal behavior in our May 2025 environment was giving greyed out visual and not showing the data, after upgrading to January 2026 on test environmnet. the behavior has changed and it automatically refreshes indefinitely until an RLS is set. the page keeps reloading with error 401 unauthorized.
Solved
MTerkait
5 months ago Place Report Server
1.5KViews
0likes
5Comments
RLS in Sep 2025
Hi All, More Information: i upload the existing pbi report which made by 202409 desktop to 202509 PBIRS. I found an issue that the pbi report will refresh itself infinitely, if an user is not assignned in "RLS" page and enter that pbi report. the report was created by 202409 pbi desktop for RS. you can reappear this case by creating an empty pbi report with role and uploading to PBIRS, then entering it by yourself. i have tested for two times. this is different from previous version of PBIRS. there are almost 100 up pbi reports in my PBIRS. i am afraid of: 1. rebuilding every pbi reports mannually and uploading them. 2. affecting RLS feature in older version pbi report.
Solved
Vanchy_Liao
7 months ago Place Report Server
2.1KViews
0likes
11Comments
Row Level Security - SSAS/Report Server
Hi everybody, I have been struggling lately about how I should implement the "RLS" so that it is reflected in the power bi dashboards. In other words, 1- First, I have designed a SSAS project and implemented roles using dynamic rls and also added desired members 2- Then I deployed the project on an Analysis Server database 3- Creating live connection in power bi and designed my dashboard 4- uploaded the .pbix file on the report server (on-premise). 5- Although I have defined rls in ssas visual studio, all users can see all of the information? and this is something that bothers me. Note: I analyzed my SSAS project in Excel and all RLS configs are working like a charm. (RLS in Power bi -> Not ok, Excel -> Ok) Is there anything else that I am missing which leads to this outcome? I greatly appreciate your help. Thanks, Kasra
Solved
Anonymous
8 months ago Place Report Server
2.5KViews
0likes
9Comments
PowerBI - RLS for External Users
Hi Community! I created a RLS for a PBI, but some people are outside of the organization. When I go on the Semantic model > Security > and I add people to the User group, I get the error "some people are outside of the organization". Is there a way to fix this? Thank you!
Solved
mcaraff
11 months ago Place Report Server
2.2KViews
2likes
2Comments
RLS Not Applying When Added/Saved from Power BI Report Server, but Works After Re-uploading it
Hello, Power BI Community, I am experiencing a critical issue with Row-Level Security (RLS) that seems to depend on the workflow used to apply it. When I configure RLS directly opening in edit mode from Power BI Reporting Service, the security rules do not take effect, even though they appear to be set up correctly. The security rules only become active after the report is downloaded and then re-published from the Desktop application. Has anyone else encountered this behavior? Is this a known issue, or am I missing a step when configuring RLS directly in the service? Any help or insight would be greatly appreciated. Thank you
Solved
Maverik91
1 year ago Place Report Server
1.4KViews
0likes
5Comments
when add Domain's security group to RLS of Power BI Report Server , error occured in report page
Hi all The security group named ‘PBIGroup’ have crteated already in domain environment, while add the ‘PBIGroup’ to the RLS on Web site , there is no error in current page , but go to report page, the error "This visual contains restricted data.See details" occured for every visuals. while add individual user account to this rls box, the report page works well. i refer to the link Row-level security (RLS) in Power BI Report Server - Power BI | Microsoft Docs. there is a limit like below, but there is no other details or configuration guidance to describe the "NTLM or Kerberos authentication" so how can i make the security group work for the RLS of Power BI Report Server, there is other steps is missing? the document link Configure Kerberos to use Power BI reports - Power BI | Microsoft Docs is the right one to solve this group rls issue ? note: the data source is SQL Server any suggestions is welcome , thank you for your help! Best Regards Amy
Solved
Meng
1 year ago Place Report Server
1.9KViews
0likes
4Comments
For Dynamic Row Level Security do I still need to add members on power BI service?
How can I fully implement Dynamic Row-Level Security (RLS) in Power BI without having to manually add users to the role in the Power BI Service under Semantic Model-> More options → Security → Add members? Context: I've implemented Dynamic RLS using a SQL database that contains user emails, and I'm using the USERPRINCIPALNAME() DAX function to filter data based on the logged-in user. This works as expected in Power BI Desktop using the "View as Role" feature. However, in the Power BI Service, some users are unable to see the filtered data unless I manually add them to the RLS role. Since the filtering logic is already dynamic and based on the user's email, I was hoping to avoid this manual step. Is there a recommended workaround or best practice to automate this process and ensure users are recognized by the RLS logic without needing to be explicitly added to the role? under Semantic Model -> More options → Security → Add members?
Solved
ananda31
1 year ago Place Report Server
4KViews
2likes
8Comments
Filtering data on selected language
Hi, I'm trying to create a multi-language report based on the USERCULTURE(). I started by creating a measure: Selected_Language = LEFT(USERCULTURE(),2) This returns the language: en, nl, fr, ... I have an overview of events, each containing a code for department, function, ... I imported an excel containing "codes" and their translations for certain tables: Department Function Based on the selected_language measure, I would like to display the correct value for department and function for each event. I created un unpivoted table "Safety codes" containing all codes: I created a parameter "Language" that I used to filter on role level: This seems to be working fine: However, to be able to use this approach, the user needs to be a viewer, not a member or contributer. But as a viewer, the user is not able to pin certain visuals to a dashboard. Any idea how to fix this? Or is there another approach? Without the RLS filtering, the values in all languages are shown: Thanks for some feedback on this.
Solved
Boeboey
1 year ago Place DAX Commands and Tips
585Views
0likes
3Comments
RLS filtering based on sub-group membership
Hi and glad to add more info if it helps (as with many, I can't share precise data so I apologize in advance). I have 2 huge tables: AllUserRaw - contains a lengthy list of AD Service accounts with a column of "supportgroup" among others (lots of other columns of info that would interest the owners). That SupportGroup column contains the Service Now support group name per account. It also has a dedicated owner "OwenerSamAccountName" in addition to the support group: SamAccountName SupportGroup OwenerSamAccountName serviceAccountABC HelpdeskGroup fred serviceAccountZYX HelpdeskGroup jane serviceAccountQWE Janitors tom ... ... ... SnowGroups - is a dump of Service Now that has columns "groupname" and the member's "usernames". Each group is enumerated and shows the username in each group: GroupName Username HelpdeskGroup fred HelpdeskGroup sally Janitors mcrib Janitors fillet ... ... The issue in a nutshell: users connect to the dashboard using RLS and it works well to display the rows where they are the "direct owner" from the "AllUserRaw" table (this is easy to use RLS to match the UserPrincipalName to the Owner column). The issue is that if the logged in users is not a direct owner, we still want to display the rows from the Raw Users if they are a member of a support group. (In this example, Sally cannot see any rows because they are not the direct owner yet they are a member of the support group so they still should) What I tried: I tried linking the 2 tables together in the model by the "groupName" but that throws a "many to many" error as each table has many duplicate values. (eg many service accounts can have the same support group and then the support group table has many people in the same group). I tried using a DAX created bridge table between them but the issue still exists that if Sally connects, the bridge doesn't work correctly and displays nothing. I also tried creating a dynamic table using USERPRINCAPLNAME() that would only show support groups of the viewing user but PBI doesn't let you do that in dynamic tables. What I'm after: I don't mind 2 separate table visuals if it helps/matters: 1 for the "direct view" and the other for "support group view". If there was a filter/DAX way of doing a "reverse lookup" to say "if you're a direct member OR you're a member of a support group attached to that account" then show those rows. (eg filter on snowgroups based on who's logged in, get the unique group name(s) they are a member of as it could be many, and then for each group name, display the associated accounts to those groups) I hope I'm just overthinking this but I'll try and answer any questions. Thanks in advance!
Solved
gettingupthere
1 year ago Place DAX Commands and Tips
1.1KViews
0likes
6Comments