RLS not working with UPN?

ptmuldoon If you are checking the USERPRINCIPALNAME() in Power BI Desktop it might be different. Publish the report and check the card in Power BI service. 

Power BI Desktop Value:

Power BI Service Value:

Did I answer your question ? If yes, please mark this post as a solution.

Thanks,

Jai

Please explain your setup more.  Where's the model?  Fabric Default, Fabric Custom,  or Power BI workspace/legacy?

Row-level security (RLS) with Power BI - Microsoft Fabric | Microsoft Learn

Default Power BI semantic models - Microsoft Fabric | Microsoft Learn

Apologies for the delayed response (was away all weekend).

But I'm doing everything here in the Power BI Service and not in desktop.  To summary what I've done is.

1. I've created a test Workspace in the Power BI Service.

2. Created a Gen2 Dataflow that imports 1 excel (Users) table

3. Create a TestModel within my Workspace, and added the Users table to the model.

4. Created basic Power BI Report.

5. Created Role, and assigned the Role to a User Group that I know I am a part of

In the report, I've created 2 cards, 1 showing the UserName, and another showing the Email Address. and 1 other table visual of the data.

The report appears to be listing the first (alphabetical) of the username and email, and not the logged in user.   And I have confirmed the UPN I am logged in as is listed in the Users table.   My Email is actually 'User7" in this test setup.

Maybe this is where I'm still getting a little confused.

I understand I can't test another user's role in the Service.   But based on what I've done, shouldn't the report be showing myself as the logged in user? 

Why would the report show a different User, which is the first user listed alphabetically from the Users Table, and not my own username and information?

I just had another user try to access the report as well, and they received an error message of:

"you don't have permission to view the content of direct lake table"

I also just tried to hardcode the RLS email address like such, and it still does not show me as the logged in user?

My desktop report and RLS works all as expected.  I'm just trying now to replicate everything in a Lakehouse and Service, but struggling with getting the RLS to work correctly.

Hi ptmuldoon , hello Jai-Rathinavel  and lbendlin , thank you for your prompt reply!

Is there any progress on this issue?

If you find any answer is helpful to you, please remember to accept it.

It will help others who meet the similar question in this forum.

Thank you for your understanding.

Hi ptmuldoon 

• Check USERPRINCIPALNAME() : It returns the logged-in user's email/UPN. Ensure it matches your login in Power BI Service.

• Test in Service: Publish the report and confirm you're logged in with the correct email.

• Verify Role Assignment: Confirm your email or group is correctly assigned to the role in the dataset’s Security settings.

• Debug Output: Add a measure to check what USERPRINCIPALNAME() is returning:

CurrentUser = USERPRINCIPALNAME()

• Match Email Format: Ensure EMAIL in your Users table matches the format of USERPRINCIPALNAME() (e.g., [email protected]).

• Avoid Multiple Accounts: Ensure you're logged in with the intended account; clear browser cookies or use incognito mode if needed.

• Group Membership: If using a group, verify your email is part of it in Azure AD.

• Service Caching: Refresh the dataset if changes were recently made.

Did I answer your question? Mark my post as a solution, this will help others!

If my response(s) assisted you in any way, don't forget to drop me a "Kudos" 🙂

Kind Regards,
Poojara
Data Analyst | MSBI Developer | Power BI Consultant
Consider Subscribing my YouTube for Beginners/Advance Concepts: https://youtube.com/@biconcepts?si=04iw9SYI2HN80HKS