Dynamic RLS WITHOUT using internal emails

[lherbert501]

Hi there,

I have a problem with dynamic RLS whereby I am aiming to set it up, but not for internal emails.

This will be done either via a generated email or a customer ID.  

This works as expected and filters correctly when I select the customer that is manually set up that I store in a table e.g. Customer@Test.com below

My issue is how this then works on the service end? I have a list of 10 example customers customer1@test.com, customer2 etc, which all have different ID's.

Does anybody know how this would work once the PBI is published and I go into the security of the dataset, as these email addresses or ID's that I will use are not stored on a tenant and are not internal emails therefore won't show as members on the azzure drop down in the image below.

These emails will eventually pass through Embedded, but I need to get the testing on the service RLS correct first.

Thanks

Liam

[Anonymous]

Hi @lherbert501 ,

RLS works by automatically applying filters to every DAX query, and Dynamic row level security apply dynamic filters by using userprincipalname() to get the user's account (email) that is currently logged in to Power BI. Row-level security (RLS) guidance in Power BI Desktop - Power BI | Microsoft Learn

If you want to implement Dynamic row security for external guest users, you need to first add them as guest users in Azure Active Directory and give them access to reports and datasets.

Links to some documentations that will be useful to you.

Distribute content to external guest users with Microsoft Entra B2B - Power BI | Microsoft Learn

Distribute Power BI content to external guest users using Microsoft Entra B2B - Power BI | Microsoft...

Best regards,

Mengmeng Li

[Idrissshatila · Accepted solution]

Hello @lherbert501 ,

it won't work on the service end, this function is designed for the emails, the logged in emails.