Row Level Security possible of Power BI Embedded with ext users with Power BI or Analysis Services?

[Anonymous]

-Does Power BI Embedded support row level security?

-Does row level security of Power BI Embedded support external users?

-Does row level security of Analysis Services connected to Power BI Embedded support external users?

[TedPattison]

Yes to all three questions. 

As with any case using Power BI RLS, you must create roles in your PBIX project in Power BI Desktop just you would for any other use of RLS. Also remember that Power BI Embedded capacities do not support first party embedding. That means you must generate embed tokens to embed Power BI resources into a page. The first way to use RLS is to generate embed with RLS roles inside. When you embed an Power BI resource with the embed token, the user will only see the data allowed by the role(s) inside the embed token,

You can also pass a username inside an embed token using the EffectiveIdentity object. Here is a simple usage.

GenerateTokenRequest tokenRequestEasternData =
  new GenerateTokenRequest(accessLevel: "view",
                          identities: new List<EffectiveIdentity> {
                            new EffectiveIdentity(username: "myUser@myPrivateCustomerPortal.com",
                                                  datasets: new List<string> { datasetWithRlsId },
                                                  roles: new List<string> { "Eastern Sales Regions" })
                          });

If you pass a username in the EffecitveIdentity, then you can use the ever popular dynamic RLS security scheme (aka the Kasper RLS method).