Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Register now to learn Fabric in free live sessions led by the best Microsoft experts. From Apr 16 to May 9, in English and Spanish.

Reply
VV24
Helper III
Helper III

row level security see all

Dear all,

 

I have a workspace, with multiple reports, i want some reports to be seen by group A and some to be seen by group B.

Although you cant hide the report for one another, i can make the reports 'empty' with the use of RLS.

So therefore i would like to set up RLS where if you are assigned a role, you can see the data of the report, and if you are not in the group you cant see it.

 

For instance, group B can see Report B. how can i set up this RLS with an role that can see all data.

 

data looks like this:

dimension table with departmens:

DepartmentUser
AA1
BB

2

CC3

So my users in group B can see all the departmens, how can this work?

1 ACCEPTED SOLUTION
v-easonf-msft
Community Support
Community Support

Hi, @VV24 

RLS is aimed at data row level filtering. It filters datasets rather than specific reports according to the established role rules.

If you just want some reports to be seen by group A and some to be seen by group B,it is recommended to use blopez11's workaround.

For your instance,if you want  user in  group B can only see all data in ReportB,you need to create a role, filter ReportB related table by enter a dax expression that return "True" and filter out other tables that are not related to ReportB by entering a dax expression that returns "False".

For example:

124.png

 

Best Regards,
Community Support Team _ Eason

View solution in original post

3 REPLIES 3
v-easonf-msft
Community Support
Community Support

Hi, @VV24 

RLS is aimed at data row level filtering. It filters datasets rather than specific reports according to the established role rules.

If you just want some reports to be seen by group A and some to be seen by group B,it is recommended to use blopez11's workaround.

For your instance,if you want  user in  group B can only see all data in ReportB,you need to create a role, filter ReportB related table by enter a dax expression that return "True" and filter out other tables that are not related to ReportB by entering a dax expression that returns "False".

For example:

124.png

 

Best Regards,
Community Support Team _ Eason

blopez11
Resident Rockstar
Resident Rockstar

Instead of RLS, how about do not grant your report consumers access to the workspace, but instead grant them access to the specific reports for which you want them to have access

 

Create two security groups, (just for example, group_A, group_B), then share specific reports with group_A and other specific reports with group_B

thanks for your answer @blopez11  but i would like them to use the apps instead of workspaces in the end. since we have a premium capacity.

Helpful resources

Announcements
Microsoft Fabric Learn Together

Microsoft Fabric Learn Together

Covering the world! 9:00-10:30 AM Sydney, 4:00-5:30 PM CET (Paris/Berlin), 7:00-8:30 PM Mexico City

PBI_APRIL_CAROUSEL1

Power BI Monthly Update - April 2024

Check out the April 2024 Power BI update to learn about new features.

April Fabric Community Update

Fabric Community Update - April 2024

Find out what's new and trending in the Fabric Community.