Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Be one of the first to start using Fabric Databases. View on-demand sessions with database experts and the Microsoft product team to learn just how easy it is to get started. Watch now

Reply
dlandry
Helper I
Helper I

Row Level Security and Licensing

I am implementing row level security based on UserID.  I've created a measure (User = Username()) and then created a role called MyAssignments ([User] = Username()).  This seems to be working fine except for anyone outside the organization.  When I share this with someone outside the organization Power BI will not allow me to add that persons email address to the MyAssignments role.

 

Can someone explain:

  1. What are the licensing requirements for internal users and external users when using role based security?  I'm understanding that all the internal users would have to have a power bi pro license which seems riduculous because all they are doing is viewing the reports they don't create any visualizations etc.
  2. Is there a different way to do this other than using role based security?
  3. Can external users be added to role based security?  If so how is that done?  If not, do all my external users have to have a doman Office 365 account and be given access to the Power BI application.

The request is simple just show only report items related to that user but when I tested it with one of the users it prompted them to get a 60 day pro license. 

 

Thanks for your help

2 REPLIES 2
Greg_Deckler
Super User
Super User

Any report that uses Pro features, users that view it must also have a Pro license. RLS is a Pro feature.

 

Here is a blog post on a different approach to RLS that may or may not help:

http://community.powerbi.com/t5/Community-Blog/Different-approach-to-Dynamic-Row-Level-Security/ba-p...

 

As for external users, one way that I have gotten around this is to invite external users to a SharePoint site. In this way, they create a "stub" account in your Active Directory that is tied to their external Microsoft "Live" account. You can then add that "stub" account as one of your members in your RLS group.

 



Follow on LinkedIn
@ me in replies or I'll lose your thread!!!
Instead of a Kudo, please vote for this idea
Become an expert!: Enterprise DNA
External Tools: MSHGQM
YouTube Channel!: Microsoft Hates Greg
Latest book!:
Power BI Cookbook Third Edition (Color)

DAX is easy, CALCULATE makes DAX hard...

But these stub accounts need a Power Bi Pro licence aswell, or am I wrong?

Helpful resources

Announcements
Las Vegas 2025

Join us at the Microsoft Fabric Community Conference

March 31 - April 2, 2025, in Las Vegas, Nevada. Use code MSCUST for a $150 discount!

Dec Fabric Community Survey

We want your feedback!

Your insights matter. That’s why we created a quick survey to learn about your experience finding answers to technical questions.

ArunFabCon

Microsoft Fabric Community Conference 2025

Arun Ulag shares exciting details about the Microsoft Fabric Conference 2025, which will be held in Las Vegas, NV.

December 2024

A Year in Review - December 2024

Find out what content was popular in the Fabric community during 2024.