Mapping External User

DAX Report Design Showcase
1

Hello,

We have a user outside our org. (Same org. but different agencies).

Our email address is: JohnDoe@mycompany.com. Their email addess is: MarySmith@agency.com

In outlook, I see MarySmith correctly.

We have row level security, now, In power bi desktop, I am am able to see Mary Smith’s data correctly, when I click “View As” MarySmith@agency.com

But Mary Smith is unable to see her data in Power BI service.

The way we add Mary smith is:

Mary.Smith_agency.com#EXT#@mycompany.onmicrosoft.com

Can someone please explain if I need to talk to AD guys to get this resolved? And what should I tell them?

Thanks,

RK

2

Bumping this post for more visibility from our experts and users.

3

HI @rit372002 - As per my understanding to share any reports with external user, they needs to be added as a guest in AD first. Only then they will be able to access the report.

Please check

Thanks
Ankit J

4

Thanks @ankit

That’s what we exactly did.

  1. Our Azure Admin had sent the invitation to extenral users via Azure Active Directory (AAD).
  2. They accepted the invitation.
  3. So they are in the system.
  4. I added them in the “Security” section RLS of Power BI Dataset in service as their EXT email. As that’s the only one is coming, when I search for it. Mary.Smith_agency.com#EXT#@mycompany.onmicrosoft.com
  5. They can access the workspace and the report but not the report content.
  6. Because I think the EXT email is added but they are coming as MarySmith@agency.com
  7. So their actual email address doesn’t have access on the content.
  8. I thought the step #1 would resolve the issue to get access and to get converted for RLS.

Now, as an extra step, I created a calculated column as well:

New Email = 
IF (
    EMail_Table[SMTP_ADDR]
        IN {
        "Mary.Smit_agency.com#EXT#@company.onmicrosoft.com",
        "Mary.Smith@agency.com"
    },
    "Mary.Smith@agency.com",
    Email_Table[SMTP_ADDR]
)

And in the “Manage Roles” section of Power BI Desktop,
image

Not sure which setting needs to be corrected so they can see the RLS data. Any help?

Thanks so much for your help.
RK

5

This was a good conversation but we learned it hard way: I have a solution now.

Steps for External users to see Internal Dashboard:

  1. Azure Admin send the invitation to extenral users via Azure Active Directory (AAD).
  2. USers accepted the invitation. So they are in the system.
  3. This step helps that they can see the dashboard.
  4. Now for RLS: Add them in the “Security” section RLS of Power BI Dataset in service as their EXT email. As that’s the only one is coming from Active Directory.
  5. On the BW side, add their actual email address than the EXT email.
  6. When User logs in to the service, they log in as their actual email hence the step 5 helps on the RLS side.

The step 5 was crucial in our scenario.

Thanks.

6

@rit372002 - Thanks. Great.