Forum Discussion

manoj_0911's avatar
manoj_0911
Icon for Kudo Commander rankKudo Commander
1 month ago
Solved

Power BI App email notification behavior for Azure AD Security Group members

Hi everyone,

 

I'm trying to understand the email notification behavior when publishing a Power BI App.

Here's my scenario:

  • Published a Power BI App from a workspace.

  • Created an audience and added:

    • user1

    • user2

    • HD AD Security Group (contains Victor)

  • Published/updated the app successfully.

Observed behavior:

  • user1 received an email notification.

  • user2 received an email notification.

  • Victor did not receive an email notification, even though he is expected to receive access through the HD AD Security Group.

My questions are:

  1. Does Power BI send notification emails only to users added directly, but not to users who receive access through an Azure AD Security Group?

  2. If a user is granted access via an AD Security Group, should they still receive an email notification?

  3. Has anyone observed this behavior, or is this expected by design?

  4. Is there any Microsoft documentation confirming how email notifications work for users who inherit app access through Azure AD Security Groups?

I understand that users can access the app from the Apps section in Power BI even without an email. My question is specifically about whether notification emails are expected for AD Security Group members.

Thanks in advance!

  • Hii manoj_0911 

     

    Adding a Microsoft Entra security group to an app audience grants its members access, but Power BI doesn’t guarantee an individual notification email to every group member. Microsoft specifically states that sharing notifications are sent to individual users, not groups. Victor should still be able to open the app from the Apps section or through the app link once group membership is synchronized. For reliable communication, send the app link separately to the mail-enabled group or use Outlook/Power Automate. Microsoft’s app documentation does not clearly guarantee email delivery to inherited security-group members.

    The link below explain this:

3 Replies

  • Hii manoj_0911 

     

    Adding a Microsoft Entra security group to an app audience grants its members access, but Power BI doesn’t guarantee an individual notification email to every group member. Microsoft specifically states that sharing notifications are sent to individual users, not groups. Victor should still be able to open the app from the Apps section or through the app link once group membership is synchronized. For reliable communication, send the app link separately to the mail-enabled group or use Outlook/Power Automate. Microsoft’s app documentation does not clearly guarantee email delivery to inherited security-group members.

    The link below explain this:
  • ShahRukhSameer's avatar
    ShahRukhSameer
    Icon for Continued Contributor rankContinued Contributor

    Hi manoj_0911,

    This is the expected behavior from what I've seen.

    Users who are added directly to the app audience typically receive the notification email (if notifications are enabled), but users who gain access through an Azure AD / Entra ID Security Group don't always receive individual email notifications.

    They still inherit access to the app and should be able to find it under Apps in the Power BI Service, but email delivery to every member of a security group isn't something I'd rely on.

    In practice, when distributing apps to large groups, many organizations send their own communication with the app link rather than depending on Power BI notifications.