Forum Discussion
Helper IVGroups for access versus groups for roles?
Hi SamTrexler,
1. "If I understand you correctly, the Power BI group will control access to the reports and dashboards, but has nothing to do with RLS. RLS has to be defined and managed separately, and separate groups set up for that if needed. Is that right?"
Yes, you are correct. Power BI group and RLS are different features, they are configured separately.
2. could you clarify for me your statement that "if you create a Power BI group, and set a member as group admin, the user can share the dashboard with Office 365 distribution group" (emphasis mine)? According to my security admin, "The only groups available in AD are office 365 groups, distribution, dynamic distribution, security and universal." Which type(s) of groups are you referring to with these two phrases? My testing isn't working as expected, so I need to know which types of groups work for this.
AS you said "If make make him an Admin of the group, he can edit the reports shared with the HelpDesk group; and", I assume the member is a admin of the Power BI group, and explain the RLS is not applied for this member in this scenario.
What I mentioned "user can share the dashboard with Office 365 distribution group" is that . And I have tested in lab about add Office 365 security group as a member of RLS role and it's working.
Best Regards,
Qiuyun Yu
Community SupportHi SamTrexler,
- James can run any report or dashboard shared with the HelpDesk group;
Do you mean the HelpDesk group is a Office 365 group?
- If make make him an Admin of the group, he can edit the reports shared with the HelpDesk group; and,
Do you mean the group of "Admin of the group" is Power BI group or Office 365 group?
- Row-Level Security will restrict which rows he can see, e.g., only those for stations that he is responsible for (unless he is an Admin, in which case he sees all rows).
In a Power BI group, the member who can edit the report or is owner of the dataset, RLS is not applied for this user.
In your scenario, if you create a Power BI group, and set a member as group admin, the user can share the dashboard with Office 365 distribution group, and he can also edit dashboards, reports and datasets with the group. But at the same time, RLS settings set for datasets within this Power BI group will not applied for this user.
Best Regards,
Qiuyun Yu
Helper IVv-qiuyu-msft, thanks for the reply and confirmation. If I understand you correctly, the Power BI group will control access to the reports and dashboards, but has nothing to do with RLS. RLS has to be defined and managed separately, and separate groups set up for that if needed. Is that right?
Also, could you clarify for me your statement that "if you create a Power BI group, and set a member as group admin, the user can share the dashboard with Office 365 distribution group" (emphasis mine)? According to my security admin, "The only groups available in AD are office 365 groups, distribution, dynamic distribution, security and universal." Which type(s) of groups are you referring to with these two phrases? My testing isn't working as expected, so I need to know which types of groups work for this.
Thanks for your help.
Sam
- v-qiuyu-msft
Hi SamTrexler,
1. "If I understand you correctly, the Power BI group will control access to the reports and dashboards, but has nothing to do with RLS. RLS has to be defined and managed separately, and separate groups set up for that if needed. Is that right?"
Yes, you are correct. Power BI group and RLS are different features, they are configured separately.
2. could you clarify for me your statement that "if you create a Power BI group, and set a member as group admin, the user can share the dashboard with Office 365 distribution group" (emphasis mine)? According to my security admin, "The only groups available in AD are office 365 groups, distribution, dynamic distribution, security and universal." Which type(s) of groups are you referring to with these two phrases? My testing isn't working as expected, so I need to know which types of groups work for this.
AS you said "If make make him an Admin of the group, he can edit the reports shared with the HelpDesk group; and", I assume the member is a admin of the Power BI group, and explain the RLS is not applied for this member in this scenario.
What I mentioned "user can share the dashboard with Office 365 distribution group" is that . And I have tested in lab about add Office 365 security group as a member of RLS role and it's working.
Best Regards,
Qiuyun Yu- jadhav_vilas84
Advocate II
Hi,
I have 5 roles ,Role-1 , Role-2 , Role-3,Role-4,Role-5.
On power Bi , I had added emails on particular Roles group , I have multiple user for Support , and these users have all groups access , How Can I manage all roles in Power Bi , or How Can I create Support Role group in Power Bi desktop,
I have One table RoleGroup
Role_Code Role_Name 1 Role-1 2 Role-2 3 Role-3 4 Role-4 5 Role-5 and In Power BI desktop I had assign Each role = [Role_Code] = "1" or other values.
How Can I manage for Support Role = [Role_Code] in ("1","2","3","4","5")
Please guide.
tthanks
vilas jadhav
Hi,
I have created one Group on Power BI which name is powerbi_testrls which have read access only as mentioned.
I've created a rôle which name is User US which implement row level security.
When I click on my dataset > security, I see all my organisation emails but I don't see my Power BI Group.
So have you gotten this to work with Dynamic Distribution Groups?