Register now to learn Fabric in free live sessions led by the best Microsoft experts. From Apr 16 to May 9, in English and Spanish.
Hi,
I implemented RLS on my power BI report server (January 2019) and it went success.
Implemented the roles and users can access only the data which they are assigned to.
But the problem is, when user edit or download the report to power bi desktop, they can access all the data
in the table even though they are restricted to see only specific data via RLS.
The user have just browser permission on the report level.
I'm using January 2019 on both server and desktop.
Appreciate your answers.
Thanks
GV
Have you got the solution i am facing same issue.
Hi
If your users have writing permission on the workspace (Member or Contributor Workspace Role) according to the documentation, the Row Level Security doesn't apply to them.
Also, you can limit the download for a user with Pro license, by changing it "Workspace Role" from Member to Viewer
Hope this helps.
Regards
https://docs.microsoft.com/en-us/power-bi/service-admin-rls
"If you have configured the workspace so that members have edit permissions, the RLS roles will not be applied to them. Users will be able to see all of the data."
I am getting all data although rls applied.
i have user UPN
Actually, I'm thinking that's probably correct but not at all what you intended. Desktop isn't going to know about the roles per say (as in that a user is a member of a particular role). Only the Service or Server know that. I assume what you thought would occur is that when the user downloaded the PBIX that only the data they could see would be there. However, I do not believe that is the case even with the Service actually. I may be mistaken on that.
Someone from Microsoft will have to answer definitively on this but I do not think that what you are describing is how RLS works. My understanding is that a User is tied to a Role and a Role is tied to a piece of DAX code. When RLS is enabled, the DAX code pre-filters the data model within the Service or Report Server. Outside of that model, if you allow users to download PBIX files, then it's just data.
I'm not from MS, but I've been working with the tabular engine since it was first released. Greg's answer is 100% correct. The RLS filters are an extra DAX filter that is applied at query time. The underlying data is not physically partitioned, the PBIX file contains all the data for all the roles.
So the key take away here is that if you have enabled RLS in a Power BI file you should not enable end users that are not allowed to see all the data to download the pbix file.
do we have any feature/ Process to disable the download option for the end users from downloading the data from power BI server?
Covering the world! 9:00-10:30 AM Sydney, 4:00-5:30 PM CET (Paris/Berlin), 7:00-8:30 PM Mexico City
Check out the April 2024 Power BI update to learn about new features.
User | Count |
---|---|
14 | |
6 | |
4 | |
3 | |
3 |
User | Count |
---|---|
14 | |
9 | |
6 | |
3 | |
3 |