RLS & Workspace permission issues

[QS7]

Hi everyone, I'm encountering issues with the permissions in the app. I want my user to only have access to certains ables in a report. When the user is defined as a Viewer, the RLS is working perfectly fine, however if the user is defined as a contributor the RLS doesn't seems to apply. I made some research and it seems that this is the expected behaviour. Is there some workaround to allow an user to update a report while restricting access to certain tables ? Thanks, QS.

[v-stephen-msft · Accepted solution]

Hi @QS7 ,

For users who have permission to edit reports, RLS does not work. At present, we can only classify data sources, and use different data sources for users with different permission.

Best Regards,

Stephen Tao

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[QS7]

@GilbertQ thanks for the answer.
So if i understand there is no way to give a writing permission to an user while restricting his data accesss.
Do you know what are the good practice for this kind of issue ? ( We were thinking to create a workspace per functionnal domain )

[GilbertQ]

Hi @QS7 

Currently a user can be either a Viewer where RLS is applied. Or the user can be a contributor or member or admin and they will see all the data.

There is no other way to get this working as of today.

You can vote for an idea at https://ideas.powerbi.com