Forum Discussion

PelaezLink's avatar
PelaezLink
Icon for Helper I rankHelper I
3 years ago
Solved

RLS for external users without Power BI account.

Hello everyone.

 

I have a finsihed Power BI report and is it supposed to work as an app-dashboard thing. Basically we will distribute the report to nearly 300 users, each one should be able to view only the info of their company and not the rest, but the report is the sameone to everyone. Doing this is just applying a filter in one of the tables to keep just the rows for that company. This can be easily done with roles. The issue we have is that I can't use RLS security eventhough I have acces to Azure AD to add external users because we cannot asume that they have a Power BI account. When you share the link with an authorized microsoft account and it does not have a Power BI account it seems unable to view the report. We could also create new users on Azure AD one for each client but those new accounts don't have the Power BI license either. We they receive the link for the report and sign up, they have access to the report but are unable to view it and get a message saying they need to register in Power BI to view the content. Paying the Premium capacity one to have a license for the new users created on Azure AD is not an option for us due to high cost. I have a Pro and Premium account but they are individual for me, and I can create new users on Azure AD for each client for example and give them the credentials, they don't need to give me their microsoft accounts but I don't know how to register the new user I create on Power BI for free. I was wondering if there is a way to implement this solution.

 

Thanks a lot.

  • Hey PelaezLink ,

     

    unfortunately, there is no simple answer.
    The only way to access Power BI content without any kind of authentication is the feature called "Publish to web", but this feature does not support Row Level Security. Please be aware that it is absolutely not recommended to create different reports, one report for a customer and publish these reports to the web. Everyone how has the url can access the report.
    Basically there are two solutions.

    1. Add users to your AAD
      This means users must be in your Azure AD for authentication, and also must have a license, as you ruled out Premium Per Capacity due to costs, users need to have a Pro license, either they can use their own, or you can assign one of your Pro licenses to these Azure Active Directory users.

    2. Create a Power BI embedded solution
      This requires that you create a web app "Embed for your customers" and do the user management from inside the app, this kind of solution requires you to buy a so called A-SKU.
      1. Power BI embedded analytics overview - Power BI | Microsoft Learn
      2. Pricing for A-SKU's: Pricing - Power BI Embedded | Microsoft Azure

    Hopefully, this helps to tackle your challenge.

     

    Regards,

    Tom

2 Replies

  • Hey PelaezLink ,

     

    unfortunately, there is no simple answer.
    The only way to access Power BI content without any kind of authentication is the feature called "Publish to web", but this feature does not support Row Level Security. Please be aware that it is absolutely not recommended to create different reports, one report for a customer and publish these reports to the web. Everyone how has the url can access the report.
    Basically there are two solutions.

    1. Add users to your AAD
      This means users must be in your Azure AD for authentication, and also must have a license, as you ruled out Premium Per Capacity due to costs, users need to have a Pro license, either they can use their own, or you can assign one of your Pro licenses to these Azure Active Directory users.

    2. Create a Power BI embedded solution
      This requires that you create a web app "Embed for your customers" and do the user management from inside the app, this kind of solution requires you to buy a so called A-SKU.
      1. Power BI embedded analytics overview - Power BI | Microsoft Learn
      2. Pricing for A-SKU's: Pricing - Power BI Embedded | Microsoft Azure

    Hopefully, this helps to tackle your challenge.

     

    Regards,

    Tom

    • PelaezLink's avatar
      PelaezLink
      Icon for Helper I rankHelper I

      Thanks a lot! It was really helpful. Seems like I might be unable to achieve what I am looking for in this way. I might try to try and use the JS Api and maybe create a custom login landing page. Anyways thanks, that was very claryfing and I think it might be useful to others.