Enable USERMEMBEROF() DAX Function for Dynamic Azure AD Group-Based Row-Level Security in Power BI/F
Organizations with large and dynamic user populations require scalable Row-Level Security (RLS) management. The current approach using USERPRINCIPALNAME() and user-to-data mapping tables becomes difficult to maintain as users frequently join, leave, or change responsibilities.
Proposed Enhancement
Make the USERMEMBEROF() DAX function generally available across Power BI Premium and Microsoft Fabric capacities, allowing RLS rules to evaluate Azure AD (Microsoft Entra ID) group membership directly within DAX.
Business Value
Using USERMEMBEROF() would enable organizations to:
- Manage security through Azure AD / Entra ID groups instead of individual user accounts.
- Reduce administrative overhead for large deployments.
- Align Power BI/Fabric security with existing enterprise identity governance practices.
- Simplify RLS model design and maintenance.
- Improve scalability for organizations with thousands of users and frequent access changes.
Current Limitation
Today, USERNAME() and USERPRINCIPALNAME() return individual user identities rather than group membership. While AD groups can be assigned to Power BI roles, dynamic filtering based on group membership is not available without maintaining custom user mapping tables.
This creates significant maintenance challenges for enterprise-scale implementations.
Example Scenario
A security table could contain:
AD GroupRegion
| Sales_NorthAmerica | North America |
| Sales_Europe | Europe |
| Finance_Global | All Finance Data |
With USERMEMBEROF(), RLS could dynamically grant access based on the user's Azure AD group membership, eliminating the need to store and maintain individual user records.
Requested Outcome
- General Availability of USERMEMBEROF() for Power BI and Microsoft Fabric tenants.
- Support within Import, Direct Lake, and DirectQuery semantic models.
- Clear documentation and administration controls for enterprise adoption.
This capability would significantly improve security management, governance, and scalability for organizations adopting Microsoft Fabric and Power BI at enterprise scale.
Recent ideas
Allow the target pipeline reference in Invoke Pipeline / ExecutePipeline to be set dynamically
Problem Today, the Invoke Pipeline activity (and legacy ExecutePipeline) requires picking the target pipeline statically at design time — a fixed Workspace/Pipeline selection in the UI, which serial...JONATHANHAUN4 hours agoNew MemberNew4Views0likes0CommentsReset Bookmark Navigator Selection to the Default Published View on Browser Refresh
In Power BI Service, when a user selects a bookmark through a Bookmark Navigator, the bookmark identifier is appended to the report URL. If the user refreshes the browser page, the report reloads in ...vivek123444 hours agoMicrosoft EmployeeNew5Views0likes0CommentsSeparate Interactive and Background Compute Allocation to Prevent Throttling of Live Reports
Problem Statement When Fabric capacity utilization reaches or exceeds 100% in the last one-hour window, end users experience significant disruptions when accessing Power BI Fabric live reports. This...TilakArani5 hours agoNew MemberNew6Views0likes0CommentsAccessibility issue in the Share dialog of embedded Power BI reports
Accessibility issue in the Share dialog of embedded Power BI reports I would like to share an accessibility finding identified while testing an embedded Power BI report published as part of the cont...ugartema6 hours agoAdvocate INew106Views14likes1Comment- fbcideas_migusr8 hours agoNew MemberUnder Review385Views12likes4Comments