Forum Discussion
Issue with sign on Power BI using gmail account
- 5 years ago
Hi, s168635
Unfortunately, I guess that this problem can’t be informed as an issue that existed in Power BI, because the Gmail account is described as unsupportable in the Power BI professional document.
You can raise a new idea in the Power BI Issue, and check what’s their opinion on this issue.
Best Regards,
Community Support Team _Robert Qin
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
I did not test further - just told my users to use Gmail with caution and I could not trouble shot any issue due to lack of support.
Hello,
From further testing I think that the problem is that the email address of the user requesting the report in the app has a prefix added onto it depending on which Web browser or type of computer the request is sent from.
I added a card which shows the value of the userprincipalname variable into my test report in my app, so when our testusers access the app they can see their email (of which is being used to access the test report in the app).
I tested accessing the test report in the app with a Gmail account using a PC and MS Edge as the Web browser and my email address was displayed as mail#<[email protected]> (so, with a prefix of "mail#")
Then we tested accessing the report in the app with a gmail address but using a Mac and Safari as teh Web browser, and the displayed email had a prefix of "live.com#" infront of the user's gmail emial address.
There were no prefixes infront of the users' emails when testing using Office365 email addresses (using a PC and MS Edge).
This seems to be creating the problem, as these users' emails with prefixes do not match the email addresses we have in the database tables that are used in the test report to set Row Level Security (i.e. to define which data a user will be able to view when the report is run).
When I changed a Gmail address in the RLS database tables that the test report uses so that it had the prefix "mail#" and tested accessing the test report in the app again it worked fine - the test report showed only the results that the user was permitted to see.
We have more testing to do.
An idea I wil try is to strip the userprincipalname variable value of any prefix in the Manage Roles DAX expression in the test report, in other words, update this statement to strip any prefix from the variable when comparing it to the [Emailadress] field in the table that is used by the test report to do RLS.
Report_Users[Emailadress] = userprincipalname()
This is just a theory right now, and it may not be the users' computers or Web browsers that are causing these prefixes to be added to the users' emails when they request to view the report in the app - it could be happening in Azure AD (another team manages Azure here so I am in contact with them to look into this).
Maybe this will help save some time for anyone also experiencing this issue.
- s1686353 years ago
Helper II
The different prefixes indicate different authentication paths: I don't have a Mac now but previously I could not sign on with Gmail on a Mac, it throw an error like "404 invalid URL" or such, maybe it is fixed now.
I believe it was like: live.com# is using https://login.microsoftonline.com/xxxxxxx, mail# is using https://powerbi.microsoft.com/xxxxxx.
But anyway, Microsoft will not support it, so ...