3

I am running in this strange issue:

  • first I prepared some report with power BI desktop
  • then I go into "Manage Role" to create a rule that show data only for region ="Italy"
  • I upload the report to the power BI Services
  • I go to the security tab under dataset and associate some users (myuser@mytenant.com) to the rule
  • Finally I create a sharepoint page, where I embed the reports I prepared
  • When I access the report with myuser@mytenant.com I see all the data and not only the region = "Italy" as desired.

What is wrong with the rule? Another strange thing is, testing the rule is fine, when I test an user the rule doesn't work...

Anybody anyidea? thx a lot!

Nelson Gomes Matias
  • 1,787
  • 5
  • 22
  • 35
  • Not sure, but the creator of the report might be able to see everything regardless of what other roles they're in since RLS will show all data the user is permissioned to view ("or" logic rather than "and"). – Alexis Olson Apr 25 '18 at 14:25

2 Answers2

5

The typical "gotcha" is that the Power BI App Workspace (group) settings are left to the default: Members can edit Power BI content. For RLS to work, this needs to be changed to Members can only view Power BI content.

You make this change by logging in to app.powerbi.com (as a group admin), and using the left nav to choose the App Workspace (group) and then Edit Workspace.

This is described in the doco:

https://learn.microsoft.com/en-us/power-bi/service-admin-rls#using-rls-with-app-workspaces-in-power-bi

Mike Honey
  • 14,523
  • 1
  • 24
  • 40
  • Hello @Mike - I'm facing the same issue and I'm unable to change this setting on Upgraded Workspace. Do you have an idea where can I find this Privacy setting for new Workspace? - Thank you. – Mittal Patel Apr 15 '20 at 18:57
  • I havent tested in this scenario, but it's probably in Workspace Access, set the users to Viewer. – Mike Honey Apr 22 '20 at 03:20
0

If you publish your Power BI Desktop report to a workspace within the Power BI service, the roles will be applied to on read-only members. You will need to indicate that members can only view Power BI content within the workspace settings.

Note:

If you have configured the workspace so that members have edit permissions, the RLS roles will not be applied to them. Users will be able to see all of the data.

official documentation: Using RLS with workspaces in Power BI

Community
  • 1
  • 1
Ganesh Sanap
  • 1,386
  • 1
  • 8
  • 18