RLS for Power BI Dataset

[luisClive]

Hi 

I have question reagrding RLS for Power Dataset

-so i have a dataset "A" which is connected to report "A"

-dataset "A' is published/refreshed daily via PBI desktop

-Report "A" has no RLS

-Now I have created report "B" which is connected to PowerBI Dataset "A" ( using the Power Bi Dataset option in Enter Data)

my question 

How do I set RLS for report "B" only ? i dont want viewing rights for report "A" affected

[Erokor]

Now, it's not quite the same as traditional Row Level Security. You could keep a list of what users get what level of access in one table and apply a "Security Group" or "Distribution Group" as the RLS check that table that is imported to both data sets and related as follows: 

This would allow you to show access to a Dataset. The users will still have access to the reports, but the data within will be empty due to the filtering on the fact tables.

[Greg_Deckler]

@luisClive Not sure that is possible. RLS roles/rules are defined at the dataset level so the rules are going to be enforced on any report that uses the dataset. I can't think of a work-a-round at the moment. Perhaps a composite dataset for Report B where the RLS rules are placed on the local data model?

[luisClive]

Thank u Greg

is it possible to create 2 duplicate datasets?

e.g A1 and A2 and both refresh together

that way i can set RLS on A2?

[Greg_Deckler]

@luisClive Yes.

[luisClive]

@Greg_Deckler 

Would U be kind enough to point me to a link?

I tried your link in footer , but could not find what i was looking for, or maybe I missed it, so much content there...

[Greg_Deckler]

@luisClive Just copy your PBIX file to a new file. Publish both, now you have duplicate datasets.

[luisClive]

yes, but then  i would have to refresh two datasets separately instead of one

[Erokor]

Not necissarily, If you are only using Dataset A, you would only need to refresh that one. The list of access levels from my psuedo-image would live inside of your Dataset A.

[luisClive]

Based on your solution , this is what the distribution should actually look like

[Erokor]

Yes, therefore, when Carl@name.com or Shelly@name.com logs in they would validate to be able to see both points of data in either report. but Lindsay and James would only be able to see data from items with Report Access of "A" in your fact table.