Forum Discussion
Sending external users as effective user ID
I got it working!!! But I must I had to create a mapping in PowerBI.com. Here is what I did.
- Created a john_example.com#EXT#@mydomain.com account in my on-prem Active Directory. This would be the shadow account for user [email protected]
- In PowerBI.com I went to the data source in settings, and clicked on map user names in the users settings. I then aded a replacement rule to replace @example.com with the shadow account string.
Boom! it worked :)
Bottom line is that SSAS -- at least on-prem, does NOT support external user IDs. I had to create a shadow account in my Active Directory to which the user gets mapped into.
Hi pmdci,
Is the test user(external) a B2B collaboration user in your organization? According to this documentation, the external users can be added with this feature should be B2B collaboration users that have been added to your organization.
In this sample, a B2B external user and a group are added to the Analyst role with Read permissions for the SalesBI database. Both the external user and group must be in same tenant Azure AD.
Reference:
https://docs.microsoft.com/en-us/azure/analysis-services/analysis-services-database-users
https://docs.microsoft.com/en-us/azure/active-directory/active-directory-b2b-what-is-azure-ad-b2b
In addition, have you tried the solution in this article to get Power BI RLS(SSAS Live) to work with external users? :smileyhappy:
Regards
Hi!
Thank you so much for providing us with this additional documentation.
No, the user is not B2B. But I am not sure if that would work either because having an external user in our Azure AD does not mean that that user would exist in our on-prem AD. Bear in mind that, as per my original post, this is an on-prem implementation of SSAS which authenticate users within our on-prem Active Directory.