Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
3 years ago

Share app userprinciplename()

Hi, 

 

I have shared an app with an external user and there is a RLS with userprinciplename(). 
The external user has access to the app/report but does not see their data. 

1. Set up of RLS looks ok, add to security etc.. I can not test role has since it works on userprinciplename. --> when I test the role by adding #EXT#@... in the emailaddress its show correct. But the use of normal emailaddress should have worked as correctly as well.

2. When I look in manage admission the emailadress has this mail#... in front of the actual email address. What does this mean.


Any help???

Need Help
Show and Tell
Tips and Tricks

1 Reply

  • GilbertQ's avatar
    GilbertQ
    Icon for Super User rankSuper User
    3 years ago

    Hi Anonymous 

     

    Even though the email address in Azure Active Directory appears to be stored in a different format it is still the actual user's email address that is used.

     

    As you can see below with my example

     

    What I typically do to test the RLS is connect to the dataset where I can see the users UPN, and then filter for the users UPN to make sure it works as expected. If that works then when the user logs in that should work too.

     

    Finally can you also make sure that the user has got read access permissions on the dataset?