Dynamic RLS with USERNAME in Power BI - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ dax_lod_result

intermediate

DAX Measure Output with USERNAME() in Dynamic RLS

Consider a table Sales with columns SalesAmount and UserEmail. A dynamic RLS filter uses USERNAME() to filter rows where UserEmail matches the logged-in user.

Given this DAX measure:

Filtered Sales = CALCULATE(SUM(Sales[SalesAmount]), Sales[UserEmail] = USERNAME())

If the logged-in user is [e-mail] and the Sales table has these rows:

• (100, "[e-mail]")
• (200, "[e-mail]")
• (150, "[e-mail]")

What is the value of Filtered Sales?

Power BI

Filtered Sales = CALCULATE(SUM(Sales[SalesAmount]), Sales[UserEmail] = USERNAME())

A 250

B 450

C 200

D 0

💡 Hint

Think about which rows match the USERNAME() filter.

The measure sums SalesAmount only for rows where UserEmail equals the logged-in user [e-mail]. Those rows have amounts 100 and 150, totaling 250.

❓ visualization

intermediate

Best Visualization for Dynamic RLS User Sales Summary

You want to create a Power BI report page that shows each logged-in user only their own sales summary using dynamic RLS with USERNAME(). Which visualization type is best to clearly show the total sales amount for the current user?

A Stacked bar chart showing sales by all users

B Scatter plot of sales amount vs. user email

C Card visualization showing total sales amount

D Table showing sales for all users

💡 Hint

Think about a simple, clear way to show a single number filtered by RLS.

A Card visualization is best for showing a single summary number like total sales for the logged-in user. Other options show multiple users or complex visuals that are not filtered clearly by dynamic RLS.

❓ data_modeling

advanced

Designing a Dynamic RLS Model with USERNAME() and Role Table

You have a Users table with columns UserEmail and Region. Your Sales table has a Region column. You want to apply dynamic RLS so each user sees only sales from their region.

Which DAX filter expression correctly implements this dynamic RLS in the role definition?

A Sales[Region] = LOOKUPVALUE(Users[UserEmail], Users[Region], USERNAME())

B FILTER(Sales, Sales[Region] = LOOKUPVALUE(Users[Region], Users[UserEmail], USERNAME()))

C Sales[Region] = USERNAME()

D FILTER(Users, Users[UserEmail] = Sales[Region])

💡 Hint

Think about matching the sales region to the user's region found by USERNAME().

Option B filters sales rows where the region matches the region of the logged-in user found by looking up Users[Region] using USERNAME(). Other options mismatch columns or logic.

🔧 Formula Fix

advanced

Identify the Error in Dynamic RLS Using USERNAME()

Given this RLS filter expression in Power BI:

Sales[UserEmail] = USERNAME()

Users report that after publishing, no data is visible for any user. What is the most likely cause?

A USERNAME() returns the user's email but the filter should use USERPRINCIPALNAME()

B The filter syntax is invalid and causes a syntax error

C Sales[UserEmail] column is missing from the model

D USERNAME() returns domain\username but UserEmail stores email addresses, causing no matches

💡 Hint

Consider the format of USERNAME() output versus stored emails.

USERNAME() often returns the domain and username (e.g., domain\user), but the UserEmail column stores full email addresses (e.g., [e-mail]). This mismatch causes the filter to exclude all rows.

🧠 Conceptual

expert

Scenario: Combining Dynamic RLS with Hierarchical Roles

Your company has a hierarchy of users: regional managers and sales reps. Sales reps should see only their own sales. Regional managers should see sales for all reps in their region.

You have a Users table with UserEmail, Region, and Role columns. Sales have a SalesRepEmail and Region.

Which approach best implements dynamic RLS to meet these requirements?

A Create two roles: one filters sales where SalesRepEmail = USERNAME(); the other filters sales where Region = LOOKUPVALUE(Users[Region], Users[UserEmail], USERNAME())

B Create one role filtering sales where SalesRepEmail = USERNAME() OR Region = USERNAME()

C Create a role filtering sales where SalesRepEmail = LOOKUPVALUE(Users[UserEmail], Users[Role], "SalesRep")

D Create roles with no filters and rely on report page filters to limit data

💡 Hint

Think about how to separate access by role and region using dynamic filters.

Option A correctly creates two roles: one for sales reps filtered by their own email, and one for regional managers filtered by region. This respects hierarchy and dynamic RLS principles. Other options mix filters incorrectly or rely on manual filtering.