Forum Discussion

andleebRaja's avatar
andleebRaja
Frequent Visitor
3 years ago
Solved

Pro RLS problem in data sharing

I have this email table.   and write this dax  Mapping = VAR user_name = "[email protected]" RETURN CALCULATE(MAX('ICM_Facility'[ALFId]), FILTER('ICM_Facility', 'ICM_Facil...
Need Help
Show and Tell
  • v-yueyunzh-msft's avatar
    v-yueyunzh-msft
    3 years ago

    Hi , andleebRaja 

    Based on your case issue description, you seems to configure the dynamic RLS with the UPN used for the DAX expression that define the RLS roles,  the RLS tested successfully in the "Test as role" but displayed blank for the external users, right? I think the root cause for your issue reason may like this: when the external users are added to your organization as a guest user, their actual UPN that is used to access your Power BI tenant is displayed with the string "#EXT#@" in the middle like this:

    So when you added them to your RLS user table with their original UPN, you can successfully test them in the "Test as role" but it displayed blank for the external users when they actually use the UPN with the string "#EXT#@" in the middle to access your Power BI tenant, so you can try add them into the workspace as a "Viewer" role and check their specific UPN to update them in the user table and make the test again, thanks in advance!

     

    For more info about the Power BI Azure B2B, please refer to this official document link:

    Distribute content to external guest users with Azure AD B2B - Power BI | Microsoft Learn

     

    Thank you for your time and sharing, and thank you for your support and understanding of PowerBI! 

     

    Best Regards,

    Aniya Zhang

    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly

v-yueyunzh-msft's avatar
v-yueyunzh-msft
Community Support
3 years ago

Hi , andleebRaja 

Based on your case issue description, you seems to configure the dynamic RLS with the UPN used for the DAX expression that define the RLS roles,  the RLS tested successfully in the "Test as role" but displayed blank for the external users, right? I think the root cause for your issue reason may like this: when the external users are added to your organization as a guest user, their actual UPN that is used to access your Power BI tenant is displayed with the string "#EXT#@" in the middle like this:

So when you added them to your RLS user table with their original UPN, you can successfully test them in the "Test as role" but it displayed blank for the external users when they actually use the UPN with the string "#EXT#@" in the middle to access your Power BI tenant, so you can try add them into the workspace as a "Viewer" role and check their specific UPN to update them in the user table and make the test again, thanks in advance!

 

For more info about the Power BI Azure B2B, please refer to this official document link:

Distribute content to external guest users with Azure AD B2B - Power BI | Microsoft Learn

 

Thank you for your time and sharing, and thank you for your support and understanding of PowerBI! 

 

Best Regards,

Aniya Zhang

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly