Skip to main content

Power BI

New

RLS for Users Outside of Organization

Vote (89) Share
Adam's profile image

Adam on 20 Jun 2017 05:00:56

It would be really helpful to be able to use Row-level security on dashboards to share with users outside of the organization.

For example, you have multiple partners, and you want to restrict each partner to only view the data relevant to them. If this were implemented, you could use a single dashboard connected to a single data set.

Currently, you would need to create and manage a separate data set and dashboard for each partner.

Comments (4)
Adam's profile image Profile Picture

2b640685 4913-41c7-a952-f4e5737c3264 on 05 Jul 2020 23:16:57

RE: RLS for Users Outside of Organization

We created a script that clones reports, dashboards and tiles to a different workspace.
In this workspace we publish the datasets but without RLS.
Then we publish the workspace including outside users.

Adam's profile image Profile Picture

da46abe3 92d3-e911-a968-000d3a4f3883 on 05 Jul 2020 23:15:02

RE: RLS for Users Outside of Organization

This should obviously have been implemented together with RLS from the beginning. Please fix it asap :-)

Adam's profile image Profile Picture

aba29c65 20ec-4384-8216-63ff3de3d7b8 on 05 Jul 2020 23:07:24

RE: RLS for Users Outside of Organization

We were very excited to find out RLS was available in Power BI since we are building a dashboard to share with many different trade partners. Just found out that since they are not in our domain, we cannot apply RLS to their email addresses.

What is the point of RLS if you can't apply it when sharing with people outside your organization?

Microsoft, please fix this!

Adam's profile image Profile Picture

c2f1992c 2648-4c4d-bde8-ee3c56a9280e on 05 Jul 2020 23:01:55

RE: RLS for Users Outside of Organization

This feature is essential for the successful roll-out of a data dashboard I have advertised the release of to our customers.

I was assured by the Microsoft technical support that we would be able to use the model as I had explained, but as we get to the week of publishing it, it's clearly currently impossible - "One or more of these email addresses is outside your organisation" on the dataset security page when assigning RLS.

I understand that Microsoft want us to move over to a Premium capacity, but to restrict Pro users from sharing with other Pro users they work very closely with because their login address has a different domain is outrageous.

After research I discover that the only recourse is to either a.) add external users to our organisation, thus both paying for them and giving them access to our email/directory (out of the question on any scale), or b.) to restrict the model in Power BI desktop to the relevant rows and publish a new model for each customer (equally out of the question on any scale, especially as improvements are inevitably going to be made).

Six months of work after assurances that I could do what I wanted to do and I can't... I'm furious.