RLS external user userprincipalname

[Anonymous]

Hi 

I have a report that needs to be shared with external users and they can only see their own data. So I have set up a RLS with userprinciplename(). The filtering goes through company and emails that belong to that company, stored in excelfile so it can be updated when there is a new company or user is coming in.

Which emailaddress should I use for in the excelfile, the normal emailaddress or the emailaddress with prefx #EXT# that can be found in the service under security - add or give permission to app, --> basically the emailaddress that is known in admin?!

[Tutu_in_YYC]

That is good to know! Thanks for sharing.

[Tutu_in_YYC · Accepted solution]

Hi Coan7,

I can confirm that USERPRINCIPALNAME will identify the normal email of that external user. The normal email (not the EXT) definitely can be used for RLS. 

[Anonymous]

Ok, tnx! I noticed that for testing role you need to use the #EXT# one. So basically its not possible to test rls on external emailaddres unless you add the #EXT to the emaillist as well.

[VolueHelge]

Thank you for mentioning this. Have been struggling to test my security (view as -> entering external user) for a while now!