RLS when User has permission rights on the published workspace

[ConnieMaldonado]

Hello - I have set up Row Level Security in a Power BI report based on an organization's hierarchy using the Path Statement as follows.

I created a path statement on the main employee table to set up the hierarchy.

Path = PATH('Employee Dim'[Employee_Number],'Employee Dim'[Primary Manager ID])

In the Modeling section, I created a User role and added a filter on the employee table:

In the service, I added User A to the User role.  

User A is an admin on the workspace where the report was published.

If I test using the "View as" role functionality in the PBIX, the view for User A is limited as expected. Also, when I test from the service using "Test as Role", the view is limited as expected.

However, and this is my question, when I share the report (direct access) with User A (who remember is also an admin on the workspace), User A sees everything and the view is not limited. Is that because User A is an admin on the workspace?

If yes, will this happen if User A is a Contributor or Viewer on the workspace?

Thanks!

[MFelix · Accepted solution]

Hi @ConnieMaldonado ,

For the admins they do not get the view limited in the workspace, they have full acces so no filtered is applied on the RLS options.

Has you can see in this link workspace members assigned Admin, Member, or Contributor have edit permission for the dataset and, therefore, RLS doesn’t apply to them.

[ConnieMaldonado]

Thanks so much!  That answers the question.  I did find the following from the link you provided.  I didn't find the issue outlined to be true, as I have republished my report several times with no issues.  Do you know if this is an old issue?

Thanks!

[MFelix]

Hi @ConnieMaldonado ,

The issue that is presented is a possibly one, can happen sometimes, and they are refering if that happens that you must publish from the service.