I'm making a report that contains RLS rules based on the function USERPRINCIPALNAME(). Basically, I've created a measure that will:
- get logged in user's email
- do a VALUELOOKUP and find their user_id
- check in a table what permissions that user_id has
- hide or show values based on permissions
The measures are working as expected. Now my client wants to embed this report in a website (outside Microsoft's domain).
I would like to know what changes do I need to make in the logic of the measures? How does the embedded report authenticates the user viewing that page? Can I still use USERPRINCIPALNAME() in the embedded report?