RLS tabular model filter does not recognize Username()

[YGL18]

In Visual Studio I add the filter below to the 'Staff Education Organization' Table.

It only works if I add email address directly in the filter such as "blabla@gmail.com" instead of USERNAME().

but it does not work if I use USERNAME() function.

What can be the problem?

= 'Staff Education Organization'[SchoolID] =

          LOOKUPVALUE('Staff Education Organization'[SchoolID],

                                'Staff Education Organization'[ElectronicMailAddress],

                                 USERNAME()

                               )

Model Filter

[TomMartens]

Hey,

maybe you have to consider that USERNAME() might return something different depending on the environment:

a) Power BI Desktop
here USERNAME most likely will return something similar to domain\accountname whereas

b) Power BI Service
here USERNAME will return something like someone@domain.com

Hopefully, this gets you an idea.

Regards,

Tom

[YGL18]

Hey Tom,

Thank you for the answer. I deploy the model from VS to Azure and users log in from the add.powerbi.com. As I understand it right, we are using Power BI Service and Usename( ) suppose to return email address which is not working for me. Can you please explain more how to make this work, I am very new to it.

Thank you,

Julia

[TomMartens]

Hey Julia,

this article may guide you:

https://community.powerbi.com/t5/Integrations-with-Files-and/Azure-Analysis-Services-Azure-AD-and-RL...

I think an essential part will be to add user to the Azure AD

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-users-azure-active-director...

But maybe it will be a good idea to consult your Azure AD administrator, but maybe that's you 🙂

Regards,

Tom 

[YGL18]

Thank you for the useful article, Tom

I have two emails added to Azure.

The first email is my work account and it’s not an Admin for AAD/Azure, but it IS an Admin (“Owner”) for all the associated resources. So I guess the firsl email will not work for testing.

The second email is added as a guest account.

Whould RLS work on the second email?

[YGL18 · Accepted solution]

This is what we found:

Username() function is not returning clean email if email is added to AAD as a guest.

It attaches this string at the front:

live.com#