Users cant display visual on system with multiple live connections

[dcormiernj]

I have created and published a Power Bi system that uses three live connections to other published datasets.  When i share this with a user (i give them view access).  they are not able to display visuals associated with the live connections.  they get the following error message:

I have tried debugging this and here is what i have so far

1.  When i publish a test system with only on live connection, the user can display visuals fine.

2.  when i add a second live connection to the test system, this error occurs.

3.  I have made sure that all three systems are published in the same new work space.  and i have individually given the user read access to ALL the individual systems and datasets.  and they are all in the same work space.

4.  but the minute i add a second live connection dataset, the user cannot see the visuals.

If live connection only works with one dataset, it really is a useless feature.  can anyone help?

thank you 

[dcormiernj]

OMG!  thank you V-Polly

That worked.  I was concerned that build would give the same access as contributor (which is too much) but when i gave them view on the workspace and then view and build on each dataset.  the user was able to access and interact with the visuals but they DONT have access to modify the dataset.  This is the solution.  Thank you so much.  you have no idea !!

[v-rongtiep-msft]

Hi @dcormiernj ,

Could you tell me what is your data source?  Does your dataset apply RLS?  Maybe you can check  your dataset.

If you publish your Power BI Desktop report to a new workspace experience in the Power BI service, the RLS roles are applied to members who are assigned to the Viewer role in the workspace. 

More details:Using RLS with workspaces in Power BI 

I have also found a similar post ,please refer  to it to see if it helps you.

Users with Contributor or Viewer permission receive "Cannot load model" error 

• From the error it would appear that the dataset has RLS configured.

If it doesn't help, please provide more details.

Best Regards

Community Support Team _ Polly

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[dcormiernj]

Thank you V-Polly for responding. 

1.  My data sources are other PBIX datasets.  I Have three desktop systems and all published to BI service.  I then created a new PBIX as a summary system which needs data from the other three.  So I used "get data" and selected "Power BI Datasets".  So the only source to this new system are the three Power BI datasets from the other three systems. 

I then created visuals in this new system, published it to power bi service.  And it works great.  Except when i try to share the summary system.  if the person i am sharing with only has viewer authority they cannot see the visuals.  But if i copy the system (debugging) and remove all but one of the source datasets, they can see it fine. 

I have to make them contributors to be able to see all visuals with the real system that includes all three files.  I only want them to have view access.

2. Does my dataset use RLS?  I dont know !!!  Is RLS automatically added?  or is it possible to set it up unknowingly?  Is there a way i can tell if RLS is being used?  And if so,  can I or should I turn RLS off??

3.  And yes I am publishing to the new work space.  But I really dont know how to tell if RLS is on or not????

I am reviewing the links you gave me.

Thank you so much for trying to help me.

[v-rongtiep-msft · Accepted solution]

Hi @dcormiernj 

When you publish a report based on the Proxy dataset, every time the user connects to Proxy there is a connection established between Proxy and Base. This connection is possible only if the user has the proper permissions on both Proxy and Base datasets. In other words, if the user does not have enough permission on Base, the error could appear.

the Viewer permission is not enough to use composite models. The missing part is the Build permission, which is not part of the permission provided when the user has the Viewer permission on a workspace.

In order to assign the Build permission on a dataset for Viewer users you have to:

• Select the Manage permissions context menu for the Base dataset
• Click the Direct access tab that lists the users that have access to the dataset
• Click the Add build context menu for the user that must be enabled to access Base through the Proxy composite model.
• Make sure that the user has now both Viewer and Build permissions on the Base dataset.
• Setting the right minimal permissions for a dataset is important in an enterprise environment, also to guarantee that security roles are correctly applied to the reports.

More details: Setting the right permissions for users of composite models 

Best Regards

Community Support Team _ Polly

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[dcormiernj]

Updated Information from further testing. 

1.  this is all power bi PRO (not premium)

2.  If ALL of the datasets are in the same workspace and i grant the user member or contributor at the workspace access level.  Then the user is able to see all of the screens.

    2a.  but i really dont want the user to have that much control within the system.  I only want them to be able to view the visuals and be able to slice and dice based on the splicers i have created.  I dont want them to be able to see or update any data and I would prefer they cant even see the other datasets.

3.  if I grant the user View access at the workspace level then they are unable to view the visuals once i add a second live connection dataset. 

Can anyone shed light on this for me?  thank you