Security RLS on service

[fab]

Hi,

I created a report with a RLS.

User connected (userprincipalname()) mut only see his projects. 

I created a role in PBI Desktop, test it and it works well.

I published the report on the service and add users to the role (here too it's ok when I test the role,).

But when I open the report with my account, the rôle does not apply and I see all data.

Did I forget something ? 

I would like security to apply to every user from the moment the report is opened.

Thank for your help

Fab

[Anonymous · Accepted solution]

If you have Admin rights to a workspace, you pretty much ignore RLS.  Try testing it with a user that does not have the editting rights to the report like you do.

[prasanna18890]

solved

[v-shex-msft · Accepted solution]

HI @fab,

Current RLS only works on read only right, if users has edit permission, RLS feature will be disabled.

Using RLS with app workspaces in Power BI

If you publish your Power BI Desktop report to an app workspace within the Power BI service, the roles will be applied to read-only members. You will need to indicate that members can only view Power BI content within the app workspace settings.

Warning:

If you have configured the app workspace so that members have edit permissions, the RLS roles will not be applied to them. Users will be able to see all of the data.

Reference:

Row-level security (RLS) with Power BI

Regards,

Xiaoxin Sheng

[Anonymous · Accepted solution]

If you have Admin rights to a workspace, you pretty much ignore RLS.  Try testing it with a user that does not have the editting rights to the report like you do.