Problem with RLS on power bi service

[thampton]

Hello - i have just started using RLS and i have gotten it to work a few times, but this time i am running into issues.

I have a model, containing a few tables, each with a column containing an email address. I added the RLS on desktop with [emailaddresscolumn] = userprincipalname(). Then i add each user to the security settings on power bi service.

For me, it worked, for the person next to me it did not. I double checked they had values in all tables and were added in both desktop and service security settings.

Any ideas?

[v-frfei-msft]

Hi @thampton,

Has your issue been solved? If so, kindly mark my answer as a solution to close the case. If any other question, feel free to let me know please.

 
Regards,
Frank

[v-frfei-msft]

---

For me, it worked, for the person next to me it did not. I double checked they had values in all tables and were added in

---

Hi @thampton,

What did you mean? The user can view everything or nothing? What's the role of the uers? Actually If you publish your Power BI Desktop report to an app workspace within the Power BI service, the roles will be applied to read-only members. You will need to indicate that members can only view Power BI content within the app workspace settings.

Regards,

Frank

[blopez11]

If you could show a sample, anonymized, of the tables, along with the roles created and the associated dax, I might be able to help, as we have been able to implement both RLS and dynamic RLS Thanks,

[thampton]

Sure, i can draw it out below.

Table 1 - Username/Email address

Username           Email

Jane Doe                   jdoe@email.com

Table 2

Order # (and other columns)         Username            Email

12345                                             Jane Doe             jdoe@email.com (merged from above)

Table 3 - pretty similar to table 2 with the email column merged to the end.

RLS In Desktop - I filter every table with the email address column using [Email] = USERPRINCIPALNAME()

RLS on Service - Go to dataset, security option, then add the users by email address.