Forum Discussion

rl_evans's avatar
rl_evans
Helper II
8 years ago
Solved

Unable to test RLS with guest user

The  new Guest User for B2B is a great feature! However, I've found one minor glitch. I'm unable to test RLS on the published dataset in powerbi.com for guest users. I am able to add the guest user to the role but when I try to impersonate the guest user, the "select person or role" dialog box doesn't recognize the guest user and won't let me enter them. RLS does work for the dataset and we can we show that by logging in as the guest user in power bi and viewing the report. We just can't test it via impersonation.  Is this a known issue?

  • Well, I stumbled upon the solution.  The UI doesn't display the AAD list of names but if one simply tabs to the next field, the Apply button becomes active.  DOH!  At this point, I was able to test using impersonation.  I suppose it would be more obvious if the Apply button became active as soon as one starts typing in the Select Person field.

10 Replies

  • Hi rl_evans

     

    You can test the RLS in Power BI desktop.

     

    You can do this by going into the Modeling Tab, then clicking on View Roles, and then select View Roles As

    And in here put in the Guest users UPN (Email Address)

     

    • rl_evans's avatar
      rl_evans
      Helper II

      Yes, it can be tested via the PBI desktop which is why I said that it is only a minor glitch that RLS for a guest user can't be tested via the powerbi.com service.  However, it is still a glitch and I have to believe that it can be easily corrected by Microsoft.

  • v-jiascu-msft's avatar
    v-jiascu-msft
    Microsoft Employee

    Hi rl_evans,

     

    You can do Test as a role first. Then uncheck the box and enter the user account that you want to test.

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

    Best Regards,

    Dale

    • rl_evans's avatar
      rl_evans
      Helper II

      I think you missed the point which is that the guest user account doesn't show up in the "select person".  You can type in the guest user but the Apply button stays grayed out because the guest user isn't recognized as a member of your AAD.  Notice that in your example you entered Admin2 but also notice that the Apply button is gray as Admin2 isn't recognized.

      • v-jiascu-msft's avatar
        v-jiascu-msft
        Microsoft Employee

        Hi rl_evans,

         

        I had tested it successfully before I gave the advice to you. You need to add the guest user first. Please refer to this document.

         

        Best Regards,

        Dale

  • Well, I stumbled upon the solution.  The UI doesn't display the AAD list of names but if one simply tabs to the next field, the Apply button becomes active.  DOH!  At this point, I was able to test using impersonation.  I suppose it would be more obvious if the Apply button became active as soon as one starts typing in the Select Person field.

  • Anonymous's avatar
    Anonymous
    Not applicable

    I have similar issue, but not exactly same. When I do the impersonate testing by selecting Test as, I put my name in the Select Pseson, I can see my name there, but when I click my name or type my full name, and click anywhere of the window, my name does not show up at all, and the selected role is unticked automatically. Therefore I cannot select other users for testing.

     

    Has anyone meet smae issue?