RLS is working in powerbi desktop but not on powerbi service/workspace

[WinterGarden]

Hi All,

I am facing an issue in which rls is working in powerbi desktop, but not on workspace.
Using a security group to give admin and user access..
Added that security group as workspace viewer.
Still rls is not working.
Do you have any ideas?  

[v-kongfanf-msft]

Hi  @WinterGarden ,

It should be noted that there is a difference between using the USERNAME() and USERPRINCIPALNAME() functions in Powerbi Desktop and Powerbi Service. In Desktop, the function returns not the UPN of the login account, but the local UPN. When you add a user in Desktop The result returned after the ID is correct, but if the account ID corresponding to the Service is not added in the Powerbi Service, the correct record cannot be displayed. As the above description shows that the result is empty, it illustrates this problem.

Username(),userprincipalname()  return from desktop

Username(),userprincipalname()  return from service:

For more details, you can refer to below document:

Row-level security (RLS) with Power BI - Microsoft Fabric | Microsoft Learn

Best Regards,
Adamk Kong

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[WinterGarden]

Hi,
I've tested that userprinciple name. Created a measure for displaying the userprinciplename(

User = USERPRINCIPALNAME())

and added it into a card in the report.
Published the same report to two different workspace (dev and prod).
It's seems like in the workspace where i am facing this issue when i tested the rls in the security this userprinciple name is showing my name( i've admin access) instead of users mail id used for testing. Where as in the other workspace it is showing the users mail id that is used for testing the user role.
i've admin access to both the workspace. Not sure why this rls is working in dev workspace and not in prod workspace.
do you know what is causing this issue?

[v-kongfanf-msft]

Hi @WinterGarden ,

Refer to below limination about RLS:

Best Regards,
Adamk Kong

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[bhanu_gautam]

@WinterGarden , Can you share more information on this or you can check

Role Assignment in Power BI Service: Ensure that the roles are properly assigned to the users or security groups in the Power BI Service. This is a common step that might be missed when transitioning from Power BI Desktop to the Service.

Security Group Permissions: Verify that the security group has the correct permissions in the Power BI workspace. The group should have at least the Viewer role to see the content, but for RLS to work, the roles need to be explicitly assigned.

[WinterGarden]

Yes, security group has read permission to both report and dataset.
I've created 2 roles
1)Admin
2)Engagement level
problem is that when i test the engagement level role, rls is not working.. ie user can see the admin data
But when i test that user in powerbi desktop data is getting filtered