I am trying to figure out the default behaviour when a user is not assigned a role using row level security. I've read through many articles/questions and watched videos but none seem to address the problem I am seeing.
I have a report with many pages, there is only one page that contains data from one dataset that I would like to restrict access to. I want to restrict access to all data from that table for all users unless they are assigned to a role. To do this I created a dummy column called 'Type' in the dataset and filled it with the value 'Manager'. I then created a role called 'Managers' on my table that had the simple DAX expression:
[Type] = "Manager"
I published the report in my personal workspace and shared it with a couple of colleagues to test. I gave some colleagues the role manager and gave others no role. I made sure that when sharing that those colleagues had the minimum possible permissions i.e. they could only view the report.
What I expected:
I expected my collleagues who had not been assigned a role to be unable to view the data in the tab where I had set up a role. I expected colleagues assigned a role to be able to see the data in that tab.
What actually happened:
The colleagues who were not assigned a role could still see the data in the tab where I had implemented the role Managers. This meant that the default role was to be able to view all of the data (not what I wanted)
A possible solution:
One solution was to create another role called Other Users and assign this the expression
[Type] <> "Manager"
The above is a flawed approach though, it would mean I have to assign every single viewer of the report a role, or they will be able to see data I don't want them to. Surely Power BI has already solved this problem of having a default role? Does anyone have any suggestions?
