Dynamic RLS not working in Desktop or Service

[nbs333]

Hi,

I am sure this is something simple but I can't seem to figure it out. I have dynamic RLS  set up using USERPRINCIPALNAME(). When I test with a user's email address it filters nothing. 

I created a slicer to test the filtering directly with the same user and it works. Any idea what the issue could be? I have a few other reports with similar data models that are exhibiting the same behavior.

[v-rzhou-msft · Accepted solution]

Hi @nbs333 ,

By default, row-level security filtering uses single-directional filters, whether the relationships are set to single direction or bi-directional. You can manually enable bi-directional cross-filtering with row-level security by selecting the relationship and checking the Apply security filter in both directions checkbox. Note that if a table takes part in multiple bi-directional relationships you can only select this option for one of those relationships. Select this option when you've also implemented dynamic row-level security at the server level, where row-level security is based on username or login ID.

For more information, see Bidirectional cross-filtering using DirectQuery in Power BI Desktop and the Securing the Tabular BI Semantic Model technical article.

Best Regards,
Rico Zhou

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.