RLS with External User. Works when they sign in. Shows no data when I test as role. UPN fails.

[DaleH]

We share reports with external users.  They are invited to our tenant, have a Power BI Pro license and viewer authority.

We use an app to provide them access to the reports.

We are using RLS based on their UPN.

The external users are working as expected and can see their own data.

When I attempt to 'test as role' and 'Select person' using their identity, the tenant retrieves their id just fine, but, assigns them a UPN which is different:

   Actual UPN: mail#JohnDoe@contoso.com

   UPN Assigned by 'test as role' process: JohnDoe_contoso.com#EXT#@tenant.com

Because the UPN no longer matches, the RLS filters all the data and the test as role process shows empty screens.  

Do you know how I may test as role with out altering the security tables to grant to #EXT# UPN access?

Thx

[GilbertQ]

Hi @DaleH 

I have found it easiest to create a report where you can see the list of external users in a slicer. Then when you click on the user in the slicer it will work as it would when the user logs in.

This works well for me.

[DaleH]

@GilbertQ This is an alternative, but, it does not quite check all the boxes.  Certain users have elevates privlidges and can see reports others cannot.  Thank you for the idea, it will be useful.

[GilbertQ]

Hi @DaleH 

I have tested it this way successfully and it works well to determine if the RLS is working as expected.