topic Re: Dynamic RLS using Azure AD Dynamic Groups in Service

Dynamic RLS using Azure AD Dynamic Groups

AaronS — Fri, 18 Feb 2022 18:21:33 GMT

We have several dynamic groups in Azure AD that we'd like to utilize for RLS, but PowerBI doesn't seem to be able to see those groups.

Re: Dynamic RLS using Azure AD Dynamic Groups

v-zhangti — Mon, 21 Feb 2022 09:58:09 GMT

Hi, AaronS

You can use the following groups to set up row level security.

Distribution Group
Mail-enabled Group
Security Group

Note, however, that Office 365 groups are not supported and cannot be added to any roles.

This is the relevant document, hope to help you:

https://docs.microsoft.com/power-bi/admin/service-admin-rls#working-with-members

Best Regards,

Community Support Team _Charlotte

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Re: Dynamic RLS using Azure AD Dynamic Groups

otravers — Thu, 02 Mar 2023 21:35:43 GMT

v-zhangti your answer doesn't really address the question. A security group is a Group Type within AAD, while a Dynamic User is a Membership Type (see screenshot below). Nothing in the RLS documentation mentions a restriction in terms of Membership Type, so AAD Security Groups with Dynamic Users should work for RLS. Please advise.

Re: Dynamic RLS using Azure AD Dynamic Groups

otravers — Tue, 07 Mar 2023 20:40:57 GMT

Follow up: I tested Dynamic security groups in AAD, they get recognized and properly work for Power BI RLS.

Re: Dynamic RLS using Azure AD Dynamic Groups

naninamu — Tue, 14 Mar 2023 22:01:28 GMT

Hi otravers

Im new to all this, but need to do what you've done. Can you please briefly outline how you achieved this? I can't work out how to being in the AAD groups to PBI.

thanks, Andrew

Re: Dynamic RLS using Azure AD Dynamic Groups

otravers — Tue, 14 Mar 2023 22:15:46 GMT

naninamu Look at the RLS/OLS entry in my signature and search for "AAD", you'll find a brief explanation and supporting links.

Re: Dynamic RLS using Azure AD Dynamic Groups

naninamu — Tue, 14 Mar 2023 22:21:00 GMT

Great, thanks! I'll have a read 👍