RLS with username/email

[thampton]

Hello - i have an issue with RLS. First time using it, so might be a simple fix. I have a few tables in the model ALL which include a column that has an email address. (When i publish to PBI service, this username will match the email address in the table). When i create a role and filter all the tables to Email address column = Username(), no filtering happens.

Ideas?

[apo1979]

The Row-level security (RLS) rule with Power BI only worked in my case when in Workspace I define that users have only Viewer access.

[jcarville]

@thamptontry using USERPRINCIPALNAME() instead of USERNAME()

[thampton]

I tried this and it still did not filter anything.

I created a measure just to test, showing (user=userprincipalname) and this does show the correct email address (which matches what it in all the email columns) when published to power BI service.

[jcarville · Accepted solution]

Are you assigning users emails to the roles in the security option of datasets in the service?

[F2THEB]

This did it for me, but to me, is totally redunant. The whole reason I defined a dynamic role "[UPN] = USERPRINCIPLENAME()" was to not have to enter 'hard names' and now it turns out this only works when I add (quite the list) into the security options of the dataset service. Then I might as well hardcode the names directly into the data cube "[UPN] = johndoe@domain.com", etc. 

[thampton]

This did help! I did not know you had to add them on the service as well. It worked for 2/3 users i am testing with. For some reason the one is added on service, and the email matches what is on the table, but no filter is applied.

Thanks for the help so far!

[jcarville]

No worries, I was recently looking at RLS myself for the first time and it involved a bit of trial and error. Glad I could be of some assistance.