Using UserObjectId for Row Level Security

[mapowe]

Hi,

I'm trying to implement row-level security using the UserObjectId instead of UserPrincipleName

To check this, I created a measure WhoAmI = USEROBJECTID()

In PBI Desktop, this measure on a card returns my Security Identifier.

But when published to PBI Service, the same card returns "pbidotcominternal.analysis.windows.net" even though I'm logged in with the same login.

So 2 questions:

1) Is it possible to implement RLS with the UserObjectId?

2) Why is the USEROBJECTID() not returning my AAD Object ID (expected behavior based on the documentation)?

[GilbertQ · Accepted solution]

Hi @mapowe 

As far as I am aware you CANNOT use USEROBJECTID() because it cannot get the correct SID when using the Power BI Service.

You should be able to use the USERPRINCIPALNAME() which will return the logged in user, which will allow you to then use Object Level Security.