Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
4 years ago
Solved

How to use AD group for Row Level Security in Power BI?

I have to use the Azure AD security group name while applying row-level security. We can use userprincipalname() for user names but how we can do with AD group name?

  • Hi, Anonymous 

    In the Power BI service, you can add a member to the role by typing in the email address or name of the user or security group. 

    Currently, you can use the following groups to set up row level security.

    • Distribution Group.
    • Mail-enabled Group.
    • Security Group (AD Security Group)

    For more details, please refer to this document.

    Row-level security (RLS) with Power BI 

     

    Best Regards,
    Community Support Team _ Eason

     

2 Replies

  • Usually you use AD groups for static RLS (as role members).  UserPrincipalName()  is usually used for dynamic RLS (with user level granularity, and a permission mapping table)

  • v-easonf-msft's avatar
    v-easonf-msft
    Icon for Community Support rankCommunity Support

    Hi, Anonymous 

    In the Power BI service, you can add a member to the role by typing in the email address or name of the user or security group. 

    Currently, you can use the following groups to set up row level security.

    • Distribution Group.
    • Mail-enabled Group.
    • Security Group (AD Security Group)

    For more details, please refer to this document.

    Row-level security (RLS) with Power BI 

     

    Best Regards,
    Community Support Team _ Eason