Security: Add emails that are not in my organization

[geckodead]

Hello, I have a problem.

On Power BI Desktop, by testing the display functionality as roles, it works.

I created a dynamic role, which grants access to certain data based on the email address with USERPRINCIPALNAME () on Power BI Desktop it works.

Unfortunately, I realize that on Power BI Service it does not work. In addition to that, my role is not dynamic anymore (if I believe my research), I have to manually add all the email addresses related to roles when I thought that with USERPRINCIPALNAME (), we did not need to do that.

And this is my biggest problem, we can only add mail addresses related to our organization but I create the report precisely so that it is accessible to my clients.

Is there a solution ?

[v-frfei-msft · Accepted solution]

Hi @geckodead,

Based on my test,  even though you use the USERPRINCIPALNAME () on Power BI Desktop, you should also go to security setting of the data set you just published to add users. The advantage of using  USERPRINCIPALNAME () or username() is that you needn’t to add multi roles in Power BI desktop. For example, you create a role using DAX [username] = USERNAME() in desktop and add some related users in the role in service. Then all the members in your group or members affected by this permission to this role. 

For the external members, I suggest you to add the user as guest to Azure Active Directory in advance and share the report / dashboard to them. For more details, please check the online document.

Regards,

Frank

[v-frfei-msft]

Hi @geckodead,

Does that make sense? If so, kindly mark my answer as a solution to close the case please.

Regards,

Frank