Skip to main content

Power BI

Needs Votes

RLS for Users Outside of Organization

Vote (89) Share
Adam's profile image

Adam on 20 Jun 2017 05:00:56

It would be really helpful to be able to use Row-level security on dashboards to share with users outside of the organization.

For example, you have multiple partners, and you want to restrict each partner to only view the data relevant to them. If this were implemented, you could use a single dashboard connected to a single data set.

Currently, you would need to create and manage a separate data set and dashboard for each partner.

Comments (4)
Adam's profile image Profile Picture

Mariano Catalano on 05 Jul 2020 23:16:57

RE: RLS for Users Outside of Organization

We created a script that clones reports, dashboards and tiles to a different workspace.
In this workspace we publish the datasets but without RLS.
Then we publish the workspace including outside users.

Adam's profile image Profile Picture

HenrikSwe on 05 Jul 2020 23:15:02

RE: RLS for Users Outside of Organization

This should obviously have been implemented together with RLS from the beginning. Please fix it asap :-)

Adam's profile image Profile Picture

Joe on 05 Jul 2020 23:07:24

RE: RLS for Users Outside of Organization

We were very excited to find out RLS was available in Power BI since we are building a dashboard to share with many different trade partners. Just found out that since they are not in our domain, we cannot apply RLS to their email addresses.

What is the point of RLS if you can't apply it when sharing with people outside your organization?

Microsoft, please fix this!

Adam's profile image Profile Picture

Dominic Bristow on 05 Jul 2020 23:01:55

RE: RLS for Users Outside of Organization

This feature is essential for the successful roll-out of a data dashboard I have advertised the release of to our customers.

I was assured by the Microsoft technical support that we would be able to use the model as I had explained, but as we get to the week of publishing it, it's clearly currently impossible - "One or more of these email addresses is outside your organisation" on the dataset security page when assigning RLS.

I understand that Microsoft want us to move over to a Premium capacity, but to restrict Pro users from sharing with other Pro users they work very closely with because their login address has a different domain is outrageous.

After research I discover that the only recourse is to either a.) add external users to our organisation, thus both paying for them and giving them access to our email/directory (out of the question on any scale), or b.) to restrict the model in Power BI desktop to the relevant rows and publish a new model for each customer (equally out of the question on any scale, especially as improvements are inevitably going to be made).

Six months of work after assurances that I could do what I wanted to do and I can't... I'm furious.