Power BI Row Level Security - Cannot Load Model

[daniel_w]

Error: User is trying to access model with id=xxxxxx which has cloud RLS enabled, but they have no roles associated with them.

Background:

1. I added a user to a Row-level security group. It works fine. The user can only see the limited row of data.
2. I then remove a user from the RLS group. Sharing the report to the user.
3. Logically, the user should able to see the full data without any limitation on row.
4. But instead, the user encounters the error message below:

It seems like Power BI is still expecting the user to be in one of the security roles.

I have tried to republish the dashboard, unshare and reshare the report, but still the same error.

The only workable way in order for the user to see the full data is to create a new security role that has full access and add the user into the new role.

Is this a bug or I'm missing something?

[shprinc]

No resolution.  Still not able to access TE Adherance nor TE Adoption.

Currently in Market Coordinator role.  Need access as I report on this for 9 different stores.

Getting same message as before.  

Thanks,

Susan Prince

Market Coordinator

Market 123

[GilbertQ · Accepted solution]

Hi @daniel_w 

When you have RLS configured you would need to create an Admin role or a role without any restrictions to allow certain users to see all the data.

Another option you could do is to give the user a member role in the app workspace that is anything but a Viewer Role. This too would allow them to see all the data.

[daniel_w]

Thanks Gilbert!

This confirms my current solution. I actually had to create a role with no restriction and add the person into this new role.

Which mean with RLS configured, everyone had to be in a role, unless the person is an admin (or a member in workspace)?

[GilbertQ]

Yes that is correct

[aj1973]

Hi @daniel_w 

Did you take his rule out from the security level in Power Bi service?

[daniel_w]

Yes Amine,

I took his role out for the security role in Power BI.

I then share with him read access to the dashboard and dataset.