new workspaces Row level security

[Anonymous]

I have set up New Workspaces and Row Level Security. RLS does not seem to be working irrespective of the Role (Admin/Contribute/Member). Did anyone set up RLS with New Workspace successfully?

[CaseyJ]

Was this ever resolved? Or are there recommended settings for RLS to work with new workspaces?

[Pradeep2]

Hi Casey,

No it has not. If you need this to happen , you need to use the old Workspaces.

[v-danhe-msft]

Hi @Anonymous,

Based on my research, if you publish your Power BI Desktop report to an app workspace within the Power BI service, the roles will be applied to read-only members. I suggest you to modify your members' license in your workspace.

Reference:https://docs.microsoft.com/en-us/power-bi/service-admin-rls#using-rls-with-app-workspaces-in-power-bi

Regards,

Daniel He

[HGIllmore]

@v-danhe-msft, can you please clarify how the New Workspace roles behave when the workspace app contains a report using RLS?  If I read your post correctly, it sounds like you are saying that the dynamic row level security configured in the report dataset applies to Workspace members with a "Member" role, which is good.  If a member has a "Contributor" role so that they can add content to the workspace, are they still subject to the row level security configured in any reports published to that workspace, or does the Contributor role have access to the see everything in an RLS report?

I am looking for a way to allow report authors to contribute content to a workspace without allowing them access to all data in the sensitive reports that might also be in that workspace (RLS datasets/reports).  Is this possible with the new workspace experience?

[Pradeep2]

Exactly ! There does not seem to be a place where we give read only access to the members.

[GilbertQ]

Hi there

When you say it is not working, what is not working?

Also did you define the roles correctly for the security in the dataset?

[Anonymous]

The Row Level security is not applied. One of the restricted user roles is able to see all the data when they should see only their data. Yes, all roles are properly defined in Desktop. Testing is done using the legacy workspaces architecture roles. 

[GilbertQ]

Hi there, which role is the user who can see all the data assigned to?