Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Register now to learn Fabric in free live sessions led by the best Microsoft experts. From Apr 16 to May 9, in English and Spanish.

Reply
dlandry
Helper I
Helper I

Row Level Security and Licensing

I am implementing row level security based on UserID.  I've created a measure (User = Username()) and then created a role called MyAssignments ([User] = Username()).  This seems to be working fine except for anyone outside the organization.  When I share this with someone outside the organization Power BI will not allow me to add that persons email address to the MyAssignments role.

 

Can someone explain:

  1. What are the licensing requirements for internal users and external users when using role based security?  I'm understanding that all the internal users would have to have a power bi pro license which seems riduculous because all they are doing is viewing the reports they don't create any visualizations etc.
  2. Is there a different way to do this other than using role based security?
  3. Can external users be added to role based security?  If so how is that done?  If not, do all my external users have to have a doman Office 365 account and be given access to the Power BI application.

The request is simple just show only report items related to that user but when I tested it with one of the users it prompted them to get a 60 day pro license. 

 

Thanks for your help

2 REPLIES 2
Greg_Deckler
Super User
Super User

Any report that uses Pro features, users that view it must also have a Pro license. RLS is a Pro feature.

 

Here is a blog post on a different approach to RLS that may or may not help:

http://community.powerbi.com/t5/Community-Blog/Different-approach-to-Dynamic-Row-Level-Security/ba-p...

 

As for external users, one way that I have gotten around this is to invite external users to a SharePoint site. In this way, they create a "stub" account in your Active Directory that is tied to their external Microsoft "Live" account. You can then add that "stub" account as one of your members in your RLS group.

 


@ me in replies or I'll lose your thread!!!
Instead of a Kudo, please vote for this idea
Become an expert!: Enterprise DNA
External Tools: MSHGQM
YouTube Channel!: Microsoft Hates Greg
Latest book!:
The Definitive Guide to Power Query (M)

DAX is easy, CALCULATE makes DAX hard...

But these stub accounts need a Power Bi Pro licence aswell, or am I wrong?

Helpful resources

Announcements
Microsoft Fabric Learn Together

Microsoft Fabric Learn Together

Covering the world! 9:00-10:30 AM Sydney, 4:00-5:30 PM CET (Paris/Berlin), 7:00-8:30 PM Mexico City

PBI_APRIL_CAROUSEL1

Power BI Monthly Update - April 2024

Check out the April 2024 Power BI update to learn about new features.

April Fabric Community Update

Fabric Community Update - April 2024

Find out what's new and trending in the Fabric Community.

Top Solution Authors
Top Kudoed Authors