Forum Discussion

pbipbj's avatar
pbipbj
Frequent Visitor
6 years ago
Solved

Using "username" field in embed token for dynamic RLS

I am in the "App Owns Data" scenario and am using a master user account (temporarily) to get the access token and to generate the embed token. Eventually, the master user account will be replaced by ...
Need Help
  • pbipbj's avatar
    pbipbj
    6 years ago

    FYI.  I was able to figure out my issue.  Previously, the report was shared with the master user account.  This situation required the EffectiveIdentity in the embed token to have the master user username.  We couldn't use it for dynamic RLS.  Then we moved the report to a workspace for which the master user is an admin.  After that, the username could be used for dynamic RLS (i.e., username could contain a value other than the master user username).  So that was the difference.  Shared reports couldn't use dynamic RLS.

pbipbj's avatar
pbipbj
Frequent Visitor
6 years ago

FYI.  I was able to figure out my issue.  Previously, the report was shared with the master user account.  This situation required the EffectiveIdentity in the embed token to have the master user username.  We couldn't use it for dynamic RLS.  Then we moved the report to a workspace for which the master user is an admin.  After that, the username could be used for dynamic RLS (i.e., username could contain a value other than the master user username).  So that was the difference.  Shared reports couldn't use dynamic RLS.