Earn the coveted Fabric Analytics Engineer certification. 100% off your exam for a limited time only!
Hi all,
I'm experimenting with the new Power BI apps to distribute content. I created a security role in PBI Desktop, which users the Azure USERNAME() to apply security for sales people. When I add a specific sales person or the sale group to the security role on the dataset in Power BI service, I can then publish my app and see the security applied. All is well here; however, I would like this invidiual to be able to Edit the report and Pin tiles to create their own dashboard, while still only seeing the records related to their security role/sales performance. It seems I cannot achieve both of these. Either they can edit the report and see everything, or they can only see their data with no edit access whatsoever.
Any ideas here? Should I revert to using content packs instead?
Thanks!
Hi @Anonymous,
In a Power BI app workspace, RLS role will be only applied to the read-only members. See: Using RLS with Groups in Power BI. After we publish the app, end users get that app, RLS will also applied when users view app. But end users are not able to edit apps content, they only have view permission.
For your requirement, you can submit a idea here about the same function "Make a copy" as in content pack.
Best Regards,
Qiuyun Yu
Thanks for the reply.
Yes, they are members in the App workspace, with Edit privileges. However, when RLS is applied, they cannot edit the report at all, and therefore they cannot even pin tiles to the dashboard. I know this feature is still in preview, so maybe it's a bug?
Using the content pack approach, it applies RLS and at least it allows them to "make copies" of the dashboard and reports and then edit their local copies as they see fit.
In this scenario, we prefer not to have the sales people download and use PBI Desktop.
Are you referring to this:
I don't see any other setting related to edit/view.
Hi @Anonymous
I just tried this on my tenant and it worked where a person was able to edit and create a dashboard and pin it from a report.
I had the user as your settings below as well as being part of the app.
The only thing i can think of is your user a Free or Pro user?
Hi @Anonymous
You are indeed correct when I put the users into the App Workspace they could see all the data.
I do know from previously working with RLS, is that the person who uploads the Power BI Desktop file will always be the Admin and be able to see all the data.
I am wondering if the same thing is possible with regards to when a Member is added into an App Workspace if they are considered an Admin of the Dataset model. Which it appears to be happening in this instance.
Hopefully this is something that they can resolve going foward.
Right. I am going to instruct clients to use content packs until this is resolved. I'll play some more to see if I'm missing anything else. Let me know if you discover anything different.
Hi there
Yes I would imagine that the members would be able to edit the content, but as per your previous message it does not to do that.