RLS External Users Embedded Capacity

[TuesdayApril]

Hello all, we are working on Embedding Power BI reports into our website for external users. We are using a Power BI embedded capacity.

Confused as to how to set up RLS since there will not be a userprincipalname for the external users.

RLS should be restricted by Customer groups filtered on Current User Login Name.

I have created a security role  from a current user table that filters those customer groups:

[Login Name]= USERPRINCIPALNAME()

This is what my UI developer should use to embed?

Seems like this is not filtering for RLS.

[Jonvoge · Accepted solution]

Hi TuesdayApril

When Embedding Reports in an 'App Owns Data' scenario, Power BI does not know the USERPRINCIPALNAME() of your users, exactly as you describe.

What you can do, is to use the Username parameter during the Embedding to define a value that you are able to specify yourself and pass to Power BI, and which can be used in place of USERPRINCIPALNAME().

See the section about dynamic security in this officla docs page: Using standard cloud based row-level security with embedded content in Power BI embedded analytics -...

_____________________________________________________
I hope my comment was helpful.
If your question was answered, please mark your post as 'Solved' and consider giving me a 'Thumbs Up'.
Find me on LinkedIn, Sessionize, or my blog Downhill Data