UPN changing when adding external user to BI workspace

Question

UPN changing when adding external user to BI workspace

Thomas O'Brien 0

Hi all - I am company admin.

I have an external user added with a guest account in our azure tenant.

What is happening is when I search for the user in power BI workspace - to give them access - they appear with the correct syncronised UPN for example: Username: Joe.Bloggs and email: Joe.Bloggs_usersdomain.com#EXT#@mydomain.onmicrosoft.com - however when the workspace is refreshed it changes to Username: Joe Bloggs and email: ******@userdomain.com

There is nothing conflicting in the our entra. Also - I have tested user end and when I add the user initially it works - but once the Workspace is refreshed and it shows as ******@userdomain.com it no longer works. User licensed with a BI pro license.

Any ideas? Something their end? Are they accessing the BI workspace incorrectly thus populating the wrong UPN and resulting in failed access to the BI reports?

Many thanks.

T-admin

Paul Rigby 0 Reputation points

2024-10-18T13:49:31.3433333+00:00

Hi, I too am having this same issue. We have tested and any external partners who have an Azure tenant aren't having their UPN prefixed, and it works - it only happens for those who doesn't, and then they are identified as "mail" or "Microsoft Account".

There is an option to disable SSO for on-premise gateway. Would disabling this then revert the connection auth to the single org level built-in auth, instead of attempting SSO?

2 answers

Your answer

Paul Rigby 0 Reputation points

2024-10-18T13:49:31.3433333+00:00

Hi, I too am having this same issue. We have tested and any external partners who have an Azure tenant aren't having their UPN prefixed, and it works - it only happens for those who doesn't, and then they are identified as "mail" or "Microsoft Account".

There is an option to disable SSO for on-premise gateway. Would disabling this then revert the connection auth to the single org level built-in auth, instead of attempting SSO?

Answer 1

Hi @Admin Tom (Global)

Thank you for reaching out to us!

I understand your query when you search for the user in power BI workspace it appears with the correct synchronized UPN and email. However, when the workspace is refreshed it changes to Username: Joe Bloggs and email: ******@userdomain.com.

Could you please check external user's UPN is changing in the Entra ID (AAD) or only in the Power BI workspace.

In Power BI, user identities are managed through Entra ID (Azure AD).

When a user is added to a Power BI workspace, their identity is verified through Entra ID . The user's identity is represented by a User Principal Name (UPN), which is a unique identifier for the user in Entra ID. The UPN is typically in the format of an email address, such as "******@mycompany.com".

During a workspace refresh, Power BI queries the underlying data sources to update the information in the workspace. If the UPN is not explicitly defined in the data source, Power BI might default to using the email address as the identifier for the user. This is because email addresses are often used interchangeably with UPNs in Entra ID.

For example, if a user's UPN is "joe.bloggs#EXT#@mycompany.onmicrosoft.com", but the data source does not include this UPN, Power BI might default to using the user's email address, such as "******@userdomain.com", as the identifier for the user during the refresh process.

This behavior can cause issues with user access to the workspace if the user's email address is not recognized as a valid identifier for the user. To avoid this issue, it is recommended to explicitly define the UPN for each user in the data source, or to ensure that the user's email address is recognized as a valid identifier for the user in Entra ID.

The other side review the Entra ID sign-in logs and Power BI audit logs for any failed authentication attempts or errors related to this user.

Hope this helps. Do let us know if you any further queries.

Thanks,

Akhilesh.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Akhilesh Vallamkonda 15,320 Reputation points Microsoft External Staff Moderator

2024-05-13T04:23:20.4233333+00:00

Hi @Admin Tom (Global)
Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Akhilesh Vallamkonda 15,320 Reputation points Microsoft External Staff Moderator

2024-05-15T04:20:36.6933333+00:00

Hi @Admin Tom (Global)
Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Thomas O'Brien 0 Reputation points

2024-05-15T07:52:13.4833333+00:00

Hi

Apologies for the delayed response. I have been OOO.

So the UPN is staying the same within the Entra field - staying as joe.bloggs#EXT#@mycompany.onmicrosoft.com

It is not only changing the UPN when I add them in workspace - but also the icon/username for the user.

I did start to think because the user also had a contact setup this was conflicting - although this has long since been deleted.

Still no luck!

Thanks

Answer 2

Mora, Matteo 0

I'm seeing the same issue... We are trying to share some PowerBI dashboard externally and when I add a guest to a work area in the Power BI admin panel the UPN change.

I add the guest with the username_gmail.com#EXT#@contoso.onmicrosoft.com but suddenly it change into live.com#******@gmail.com and this is messing with authorizations (the guest can't see data)

Share via

UPN changing when adding external user to BI workspace

2 answers

Your answer