topic RLS not working anymore in Report Server

RLS not working anymore

VitoPiepoli — Fri, 23 Feb 2024 10:45:35 GMT

Hi all,

I am in big problem.

RSL stopped working on Wednesday without any apparent reason.

It works within the app when access it via "view as" but can't get it working on the PBI RS.

All the settings are in order and the employee file has its PATH well formed.

ExtendedLog3 does not has give me any issue.

Any idea?

Thank you in advance for your help.

Re: RLS not working anymore

Greg_Deckler — Fri, 23 Feb 2024 11:28:42 GMT

VitoPiepoli I would review the considerations and limitations here: Row-level security (RLS) in Power BI Report Server - Power BI | Microsoft Learn

Are you using USERNAME or USERPRINCIPALNAME in your RLS or is the RLS not dynamic like that? Did you manage the roles and add people to them on RS?

Re: RLS not working anymore

VitoPiepoli — Fri, 23 Feb 2024 11:40:22 GMT

Hi Greg_Deckler ,

everything was working fine till Tuesday afternoon.

No change was made either to the PBI model nor to the rules on the Server side.

I have been using username() since 2019 without issues.

Version June2022.

The SQL server on which RS is mounted is not managed by me though.

I don't know if they fiddled with the way the RS pick the credential or group roles.

I tried to delete the role on the server and reassign it but did not work.

Re: RLS not working anymore

josefrmorales — Fri, 23 Feb 2024 19:20:01 GMT

Having the same issue. The report and rules did not change but Row Level Security is now not working. When I try to test by impersonating a user it works for some but not all. This seems like an issue with the service. It had been working fine for over a year.

Re: RLS not working anymore

VitoPiepoli — Thu, 29 Feb 2024 08:13:06 GMT

Using username() (I wrote it in message 3/4) and I manage the roles and all the lot.

I fixed the issue now as the IT Department rolled out a change in UPN without telling it to us. So I had to change the field content the username() function was poinitng to.

Thanks