Reply
Regular Visitor
Posts: 36
Registered: ‎11-02-2017

Teams and RLS

Hi everyone,

 

I have set up RLS and it works fine when people are accessing the Dashboard and reports online. However, when I add my dashboard on the MS Teams, the RLS fails and anyone who is a member can see the full report. What do I need to do to maintain the RLS?

Super User
Posts: 3,484
Registered: ‎06-25-2015

Re: Teams and RLS

@Jawed Are the members in the workspace read only / viewers in the PBI workspace?

Near SE WI? Join our PUG MSBIWI
Regular Visitor
Posts: 36
Registered: ‎11-02-2017

Re: Teams and RLS

That is right @Seth_C_Bauer

Community Support Team
Posts: 2,482
Registered: ‎03-15-2018

Re: Teams and RLS

[ Edited ]

Hi @Jawed

1.You publish datasets and reports to an App Workplace, then you set RLS in the datasets for the members of this Workplace.

Right?

 

2. "I add my dashboard on the MS Teams" 

what does MS Teams refer to? A workplace? 

Is this dashboard a new dashboard or an exsit dashboard in that App Workplace?

Which dataset does the dashboard come from? does this dataset set up RLS alreadly?

 

for example, when i pin a tile from a report A(its dataset doesn't set up RLS) to a daskboard A, then RLS fails for that tile.

 

3. Based on my test, the dataset which the dashboard use need to set RLS so members with read permission could see limited data.

 

Best Regards

Maggie

 

Best Regards

Maggie

 

Regular Visitor
Posts: 36
Registered: ‎11-02-2017

Re: Teams and RLS

Hi @v-juanli-msft

 

I have my dashboard, report and its dataset in the workspace. I have set up the RLS and have shared it with my team. Up to here is all fine and when team members are accessing it, it works fine. 

 

The issue arises with MS Team. MS Teams is similar to Skype and you can collaborate with your colleagues and is part of Office 365. In the Teams, you can share Sharepoint folders, calendars and Power BI dashboards. So, when I share it in the Teams, the RLS completely fails. The same person who has limited access to the Dashboard in Power BI can now access the same file through Teams but can see the whole dataset. 

 

I hope it makes sense.

Community Support Team
Posts: 2,482
Registered: ‎03-15-2018

Re: Teams and RLS

Hi @Jawed

Not sure about what steps you have applied.

 

According to this article, to let RLS work, you need to add MS Team in the dataset->Security->add members

If you previously defined roles and rules in the Power BI service, you must re-create them in Power BI Desktop.

 

Please review this thread, i hope thia may give you some idea

https://community.powerbi.com/t5/Service/Microsoft-Teams-Pro-Licence-Required/td-p/90339

 

Best Regards

Maggie

Regular Visitor
Posts: 36
Registered: ‎11-02-2017

Re: Teams and RLS

Hi @v-juanli-msft

 

Thanks for sharing the links. I have gone through them and can confirm that my setting in the Power BI Desktop and the Service is all as it has been recommended. Contrary to the content of the thread you shared, my colleagues, who have Power BI licence, can view the Dashboard on Team. My problem is that they see all the information on Team. What it means is that the same people in Power BI Service can only see their relevant information but when using the same dashboard in Team, they can see everything.

 

Hope that makes sense.

 

Thanks

Highlighted
Regular Visitor
Posts: 36
Registered: ‎11-02-2017

Re: Teams and RLS

I havent been successful in finding the solution and would be grateful if one of the moderators can help me out on this.

Regular Visitor
Posts: 36
Registered: ‎11-02-2017

Re: Teams and RLS

I havent been successful in finding the solution and would be grateful if one of the moderators can help me out on this.

Frequent Visitor
Posts: 14
Registered: ‎01-03-2019

Re: Teams and RLS

From what I've read previously, members of the workspace (which is managed by Teams), can always see all of the data. RLS simply won't work.

 

Workspaces were really intended to be used for developers; not end users. Rather end users should have dashboards and reports shared with them individually, where RLS will work.

 

The new app workspaces should also allow for RLS, so if users access it that way, it should work as well, but app workspaces are still undergoing a lot of changes, so I can't guarantee that's how it's working in the current release.