Forum Discussion
Power BI Embedded and Pro, SharePoint Online, Guess access and RLS
So we have a scenario where we want to use Power Bi Embedded to share reports with guests (External users) on SharePoint Online.
What we have setup,
- O365 Group, let's call it "Client ABC", this has a corresponding team on Teams, SharePoint Team Site and Power BI Workspace.
- Added the guest user ([email protected]) to the "Client ABC" group. Tom has a Power BI Pro license.
- Embedded our report on a modern page in SPO
- Dedicated Power BI Embedded capacity to "Client ABC" workspace
- Setup some RLS rules on our report
Now my queries,
1. Tom is able to view the report on SPO, but the RLS doesn't seem to be applying, what am I doing wrong?
2. Will Tom be able to access the report and "Client ABC" workspace on Power BI? I ask this because until query 1 is sorted, we have to use filters as a means for security (Which isn't prescribed).
4 Replies
- v-yulgu-msftMicrosoft Employee
Hi Anonymous,
Now my queries,
1. Tom is able to view the report on SPO, but the RLS doesn't seem to be applying, what am I doing wrong?
2. Will Tom be able to access the report and "Client ABC" workspace on Power BI?
1. Did you add Tom to corresponding Role? Unable to test RLS with guest user
2. External B2B guests are limited to consumption of content only. They can't access the workspace on Power BI.
Best regards,
Yuliana Gu
- AnonymousNot applicable
Hi v-yulgu-msft,
1. I did add him to the corresponding role. When testing, as a member of the role, RLS is aplplied; however when testing as Tom, RLS is not applied. Could this perhaps be because Tom is part of "Client ABC" group and thus having access to the complete dataset? AFAIK, this is required for Tom to be able to see the embedded report, right?
2. That will definitely help us secure access to data, however it would be nice if we could use RLS as well.
Thanks
Mohit Garg
- AnonymousNot applicable
On the report I have setup a role, "Client ABC". In Power Bi Online, when I test,
1. As "Client ABC" role, RLS rules are applied
2. As "[email protected]", RLS rules are not applied
Anyone able to help why this is happening?