topic Re: Manage the security and RLS for big group of person in Report Server

Manage the security and RLS for big group of person

Anonymous — Mon, 25 Jan 2021 13:30:30 GMT

Hi guys,

Currently, I have to set the security and the RLS of each report manually but I will have soon 60 new users to be added. It could take me a lot of time if I do manually 60 times, so I would like to know if there is a way to do it smarter and faster

Thank you in advance !

Re: Manage the security and RLS for big group of person

lbendlin — Mon, 25 Jan 2021 23:38:14 GMT

start assigning RLS roles to distribution groups, not individuals. Consider storing the access rules in a separate table that Power BI can link to.

Re: Manage the security and RLS for big group of person

FarhanAhmed — Tue, 26 Jan 2021 03:52:13 GMT

Agree with lbendlin

- Create AD group based on the domain (HR/Finance/Sales etc) OR people accessing reports to differentiate people amongst the organization.

- Assign those groups in Report(s) Permission & RLS Permission.

- You cannot control RLS via Group, you need to have individual users stored in the table and their data role that will be used in Report.

Re: Manage the security and RLS for big group of person

Anonymous — Tue, 26 Jan 2021 08:58:38 GMT

FarhanAhmed lbendlin

sorry but I don't understand what you want to say.

All my roles are set up and now I have to assign the specific roles to 60 peoples and I would like to avoid to do it 60 times.

Re: Manage the security and RLS for big group of person

FarhanAhmed — Tue, 26 Jan 2021 09:13:44 GMT

For the first time, you need all those 60 people to be grouped somewhere. For this, you should create an active directory group "DOMAIN\MY Group Name" and members in this group. What this will do, you only need to add this group in your Roles/Report Permission.

But this group cannot resolve to user name which is mapped in your RLS configuration (Filtered) table in the data model. you need to add the individual user in that table.

This AD grouping thing will solve your hassle of continuously adding individual users in each report. You just need to add the user in the AD group and it will get access to each report which has been permitted to that group.

For creating AD Group, you might need help from your System Administrator.

Re: Manage the security and RLS for big group of person

Anonymous — Tue, 26 Jan 2021 13:42:32 GMT

Thank you for taking time to answer me . I understand the logic

Exemple : I have an AD group named as AD_Test which grouped 60 people who has their own account to log in to the report server.

- If I want them to see the report X, I just need to open rights to the group AD_Test and not to each ID User in the Security tab

- If I want them to see the report X with the role R1, I just need to assign this role to the group AD_Test and not to each ID user in the Row Level Security tab

It's right ?

Have a good day !

Re: Manage the security and RLS for big group of person

FarhanAhmed — Tue, 26 Jan 2021 13:53:09 GMT

Yes, that's correct. Perfect