Forum Discussion

mramzi's avatar
mramzi
Frequent Visitor
5 years ago
Solved

Dynamic RLS using AD-groups, Questions

Hi,   At our firm we want to manage RLS security using Excel files. These files are managed by the business. We want them to be able give access or take it away, without involvement of the BI-team...
data protection
Need Help
  • amitchandak's avatar
    amitchandak
    5 years ago

    mramzi , as far as I know, emailed enabled AD group should work. Is this group is email enabled?

v-yalanwu-msft's avatar
v-yalanwu-msft
Icon for Community Support rankCommunity Support
5 years ago

Hi, mramzi ;

If you can run success in desktop but fail in service,  In the Power BI service, you can add a member to the role by typing in the email address or name of the user or security group. You can't add Groups created in Power BI. You can add members external to your organization.

https://docs.microsoft.com/en-us/power-bi/admin/service-admin-rls

Best Regards,
Community Support Team_ Yalan Wu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

 

mramzi's avatar
mramzi
Frequent Visitor
5 years ago

Hi Yalanwu,

 

Thank you for your answer. I am already testing the RLS in that way.

Found the issue elsewhere:

 

In our organisation we have each 2 mail addresses a short one and a long one:

[email protected] and firstname.lastname@Organization.com

 

In Power BI Desktop, the first is used. In Power BI Service, the latter is used.

Because another emailaddress is used than expected, the logged user couldn't be mapped to the datamodel. Result: no data.

 

I can fix this by providing a link for both email addresses.

If anybody has more information about this phenomenom, I would be very interested.

 

Kind regards,

Ramzi