dynamic RLS is not working with App

[tonylu87]

Hi PBI experts, I am very new to PBI and recently started build some reports in PBI. I had an issue with the dynamic RLS when I published the reports via the App. I set up dynamic RLS as instructed in PBI desktop using "=username()" function and publish the report to PBI service. I then set up "security" under the dataset and assigned roles to the internal testers. When I shared the report with them, it works pretty well. They only have access to part of the report. However, when I published the workspace to the App and then share the App link to them for testing, all the previous RLS didn't work at all. They have access to all parts of the report. I carefully followed all the instructions and problem-fixings but still didn't get it work properly. What I had confirmd is 1) all the internal testers are assigned with "viewer" roles in the workspace. 2) their' email address are all entered properly to the RLS roles. I am very keen to know why this is not working when I published the workspace to the App. Thank you very much for helping me! 

[v-xiaoyan-msft · Accepted solution]

Hi@tonylu87，

Please check if you give them the app’s underlying datasets using permission in the app . That’s may cause this problem.

Hope it helps.

Best Regards,
Caitlyn Yan

If this post helps then please consider Accept it as the solution to help the other members find it more quickly.

[tonylu87]

Thanks for the suggestion. Unfortunately I've tried but still didn't work. One of my tester gave a screenshot when he installed the "app", it shows he is the owner of the app workspace after installation. Is it correct? 

[ibarrau]

Hi. This sounds weird. My first idea was that you should check members as Viewers, but you say they are. I had a problem once a long time ago with dynamic RLS that I can't understand yet why that happen. My solution was changing USERNAME() to USERPRINCIPALNAME( ). I still don't know why the first one didn't work because is the one I always use, but that might be a test for you and I hope it works :S

Regards,

P/D Unpublish/delete and publish again the app after a RLS configuration (not upgrade/upload)