on 17 Apr 2017 22:54:57
RLS roles are disabled for reports built on a live connection to a Power BI Service dataset. Please enable this functionality -- this is critical for the scalability of Power BI in my organization!
- Comments (9)
RE: Enable RLS for reports connected to a live Power BI Service dataset
How many votes does it need to be implemented? This seems so obvious to be implemented with Live Connection to Power BI dataset functionality (which MS basically encourage people to use) but still it's not yet done. The only workaround is copying your original dataset to have 2 diff RLS scenarios. It's not very efficient...
RE: Enable RLS for reports connected to a live Power BI Service dataset
I have tried to build a report that uses a dataset with a RLS plus other data sources. The only way my user could see the data was by giving him admin role in the workspace where the first dataset was located, but then the RLS does not work. If he had only viewer access, he could not see any of the data from the first dataset.
Could anyone explain how did you manage to get this working?
RE: Enable RLS for reports connected to a live Power BI Service dataset
This is key to optimizing data sets & capacity usage, and must be enabled urgently to allow scalability of Power Users in Organisation happening to be under different roles & different divisions.
Everyone creating their own data sets create struggles with the available premium capacity.
RE: Enable RLS for reports connected to a live Power BI Service dataset
I have just posted my question in the community about this issue:
(https://community.powerbi.com/t5/Desktop/Get-Power-BI-Datasets-in-Power-BI-Desktop-from-published-dataset/m-p/908794#M435575)
Got response back to submit an new idea, but found in this case (kind of) the similar situation.
When dataset creators create the dataset with RLS, publish the dataset in the PBI Service (and promote the dataset) and assign roles to the dataset security to certain users, I was expecting that users with viewer role can just see the report/dashboard, but contributors should be able to find the (promoted) dataset as a source in PBI Desktop to connect to in order to make their own (child) report, but now they can see the data without RLS. This is just a breach that has been secured through PBI Service, but broken by sharing it through the Contributor/Member role....
Possible solution? Who is signing in to the PBI Desktop and connect to the Dataset should be linked to the RLS Security role from the Parent Dataset?
Any thoughts how to get this idea very very quickly and urgent to the Dev Team? Vote!
RE: Enable RLS for reports connected to a live Power BI Service dataset
a very important feature pending from April, 2017 and not addressed yet. any possibility on this?
RE: Enable RLS for reports connected to a live Power BI Service dataset
This is not correct. RLS is against the dataset not the child reports and dashboards. It works fine with live connections. However view as role in child reports is a must in big organisations. It's the only way to be sure!
RE: Enable RLS for reports connected to a live Power BI Service dataset
I agree with proposal. "Test as role" online on child reports would be useful
RE: Enable RLS for reports connected to a live Power BI Service dataset
Luke is correct, we use this functionality heavily. the roles applied to the parent report are reflected in the child report. The View as Role should be accessible from the child report though. The inability to do this makes managing complex security rules a nightmare. We are going to have to revert back to our on premise SSAS model if this feature can't find it's way in soon which would be a sad day for us :(
RE: Enable RLS for reports connected to a live Power BI Service dataset
I believe RLS still applies to online reports created from the dataset, but it can't be viewed in a desktop report created from the online dataset.