Forum Discussion

powerbieng's avatar
powerbieng
New Member
7 years ago
Solved

Row Level Security - External User

Hi Everyone,

 

We published our report in Power BI Service and will share the report with external users. How RLS security can be implemented for an external user.

 

If we add external users details into tables(like normal users) and using USERPRINCIPALNAME() will work?

any other configurations required?

 

Please guide us.

 

Thanks 

 

 

 

 

Thanks

Venkat

Need Help

8 Replies

  • Greg_Deckler's avatar
    Greg_Deckler
    Community Champion
    7 years ago

    Should work using USERPRINCIPALNAME although there may be a slightly different format to that.

  • GilbertQ's avatar
    GilbertQ
    Super User
    7 years ago
    Hi there

    You would first need to add the external user as part of your AAD, and then assign them access to your dataset, by going into the dataset settings and then clicking on Security.

    Here are more details on how to do this. Scroll down to the section, which will explain how to achieve this.

    https://docs.microsoft.com/en-us/power-bi/whitepaper-azure-b2b-power-bi#case-study-building-a-bi-portal-using-power-bi--azure-ad-b2b--step-by-step-instructions
    • Anonymous's avatar
      Anonymous
      Not applicable
      7 years ago

      if it's pointed to Azure Analysis services you need to use CustomData(), but if you were using SSAS on premise, then it's UserPrincipalName, just the format/syntax of the external user is different for Azure AD vs AD (FYI).

      • GilbertQ's avatar
        GilbertQ
        Super User
        7 years ago
        Hi there

        I would just like to correct if you are using SSAS On Premise it does not know or understand the UserPrincipalName() and only works with Domain\UserName

        If you do have an SSAS On Premise database, then you need to use the mapping feature in the Gateway configuration.

        If you are using Azure Analysis Services, then it will understand and you can use the UserPrincipalName()
    • jontybadamwala's avatar
      jontybadamwala
      New Member
      6 years ago

      Hello,

      Will they require to have Power BI Pro License?

       

      We are dealing with an issue here, hence the questions.

       

      We have publised a report using our Power BI Pro license, to 15 users in our organization.

       

      Some of the users (out of the 15) have Power BI Pro license, and they are able to view the shared report.

      User who do not have the Power BI Pro Licesne, they are unable to view the report,

       

      What should be done?

      Thanks

      Jayanti V Badamwala

      • Anonymous's avatar
        Anonymous
        Not applicable
        6 years ago

        Yes, it does require some sort of PBI license.  Either backed by Premium capacity or Pro licenses for internal users.  The customer can have their own Pro license as well.

  • Raveendra's avatar
    Raveendra
    Microsoft Employee
    4 years ago

    Hi 

    We have to add external users Security group(which is created in Azure portal.) to RLS role . Because users frequently changed dynamically every one hour.

    when we tried to SG to role showing " you can t use invalid or duplicate emails" .  I can create distributon group/Mail enabled group  in idweb internal tool ,but it was not  allow to add external users to DL.

    in the RLS documention mentioned ROL role supports below mentioned list of Groups.

    • Distribution Group
    • Mail-enabled Group
    • Security Group

    Can you please help me any one came across this kind of issue and let me know if i missing somehting here.

    Earliest response will be apperciated ....

    Thanks,

    Raveendra