cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
AndrejBI
Helper V
Helper V

Reversed RLS security

Hi everyone, 

 

I am just thinking whether it's possible to have reversed Row Level Security access. Meaning that users in the group have all the access yet people outside of the group have limited access to some datasets. 

 

If that's not the case, I will present my problem here and hope someone will come up with a solution. I basically have some confidential data that can be only seen by 7 people in the workspace, whereas there are 150 people who can't have access to data (and more people are added on a daily basis). I can't create other workspace or anything along the lines, do you have an idea how to create this kind of view? In other words, just to limit the confidential dataset to these 7 people while everyone else can't see the dataset?  

2 ACCEPTED SOLUTIONS
v-janeyg-msft
Community Support
Community Support

Hi, @AndrejBI 

 

Your description is a bit confusing. You mentioned workspace, dataset, and data. So do you want to target the user's permissions to the workspace and dataset or the data in the report?

Workspace: You can set user permissions to workspace, there are four types: admin, member, contributor, viewer.

Only the viewer can't edit the report and has read-only permission.

Reference: Organize work in the new workspaces in Power BI - Power BI | Microsoft Docs

Dataset: You can set user permissions to dataset, there are therr types: build, reshare, read.

If you remove build permission, they can still see the report built on the shared dataset, but they can no longer edit it.

Reference: Build permission for shared datasets - Power BI | Microsoft Docs

The data in the report: You can distinguish the content of the data seen by users with different permissions in the report by setting RLS.

Reference: Row-level security (RLS) with Power BI - Power BI | Microsoft Docs

If you are interested in these methods, but still have questions, please feel free to ask me.

 

Best Regards

Janey Guo

 

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

Hi, @AndrejBI 

 

If there are too many people, you can assign them to distribution lists first, and then directly add groups.

Secondly, RLS is only for reports, and permissions for workspace should be set separately. RLS doesn't affect the permissions of the workspace, even in the workspace, after setting RLS, RLS will be the priority.

 

Best Regards

Janey Guo

 

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

5 REPLIES 5
v-janeyg-msft
Community Support
Community Support

Hi, @AndrejBI 

 

Your description is a bit confusing. You mentioned workspace, dataset, and data. So do you want to target the user's permissions to the workspace and dataset or the data in the report?

Workspace: You can set user permissions to workspace, there are four types: admin, member, contributor, viewer.

Only the viewer can't edit the report and has read-only permission.

Reference: Organize work in the new workspaces in Power BI - Power BI | Microsoft Docs

Dataset: You can set user permissions to dataset, there are therr types: build, reshare, read.

If you remove build permission, they can still see the report built on the shared dataset, but they can no longer edit it.

Reference: Build permission for shared datasets - Power BI | Microsoft Docs

The data in the report: You can distinguish the content of the data seen by users with different permissions in the report by setting RLS.

Reference: Row-level security (RLS) with Power BI - Power BI | Microsoft Docs

If you are interested in these methods, but still have questions, please feel free to ask me.

 

Best Regards

Janey Guo

 

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

Yeah, I wasn't sure which solution might be implemented, hence I mentioned all three. 

I think RLS is the closest one to what I want to achieve yet instead of focusing on this: 

Filtering users view within the group

 

I want to achieve this: 

Filtering users outside of the group (yet still in the workspace) 

 

As I mentioned before, I have only 7 users who should be able to see the confidential data and over 150 who should have a limited view. I've already tried adding the 150 to an RLS group yet I get an error message (probably too many people in the group)

Hi, @AndrejBI 

 

If there are too many people, you can assign them to distribution lists first, and then directly add groups.

Secondly, RLS is only for reports, and permissions for workspace should be set separately. RLS doesn't affect the permissions of the workspace, even in the workspace, after setting RLS, RLS will be the priority.

 

Best Regards

Janey Guo

 

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

amitchandak
Super User IV
Super User IV

@AndrejBI , Create a role and assign object-level security. This need an external tool - Tabular editor

https://powerbi.microsoft.com/en-us/blog/object-level-security-ols-now-available-for-public-preview-...



Did I answer your question? Mark my post as a solution! Appreciate your Kudos!!
Dashboard of My Blogs !! YouTube Channel !! Connect on Linkedin

Proud to be a Super User!

Thanks for the response @amitchandak,

Not sure whether you got my question correctly, I meant is there a way to use RSL for unfiltering instead of filtering. Or is there any other function, add-on that can do this? 

Helpful resources

Announcements
PBI_User Group Leader_768x460.jpg

Manage your user group events

Check out the News & Announcements to learn more.

MBAS on Demand

2021 Release Wave 2 Plan

Power Platform release plan for the 2021 release wave 2 describes all new features releasing from October 2021 through March 2022.

Get Ready for Power BI Dev Camp

Microsoft named a Leader in The Forrester Wave

Microsoft received the highest score of any vendor in both the strategy and current offering categories.

R2 (Green) 768 x 460px.png

Microsoft Dynamics 365 & Power Platform User Professionals

DynamicsCon is a FREE, 4 half-day virtual learning experience for 11,000+ Microsoft Business Application users and professionals.

Top Solution Authors
Top Kudoed Authors