Limitation of Power BI Row Level Security

Limitations of RLS in PowerBI

Here is a list of the current limitations for row-level security on cloud models.

• If you previously had roles/rules defined within the Power BI service, you will need to recreate them within Power BI Desktop.
• You can define RLS only on the datasets created using Power BI Desktop client. If you want to enable RLS for datasets created with Excel, you will need to convert your files into PBIX files first. Learn more
• Only ETL, and DirectQuery connections are supported. Live connections to Analysis Services are handled in the on-premises model.
• Q&A and Cortana is not supported with RLS at this time. You will not see the Q&A input box for dashboards if all models have RLS configured. This is on the roadmap, but a timeline is not available.
• External sharing is not currently supported with datasets that use RLS.
• For any given model, the maximum number of Azure AD principals (i.e. individual users or security groups) that can be assigned to security roles is 1,000. To assign large numbers of users to roles, be sure to assign security groups, rather than individual users.

Known Issues

There is a known issue where you will receive an error message when trying to publish from Power BI Desktop if it was previously published. The scenario is as follows.

1. Anna has a dataset that is publised to the Power BI service and has configured RLS.
2. Anna updates the report in Power BI Desktop and re-publishes.
3. Anna will receive an error.

Workaround: Re-publish the Power BI Desktop file from the Power BI service until this issue is resolved. You can do that by select Get Data > Files.