RLS not working using AD Group across multiple domains.

[msommerf]

I have a dataset to which I created roles for example:

RoleName - Operating_Company="Company1"

I test this role in PBI Desktop and it works fine. Data is filtered by Operating Company.

The report is then Published.

I add security to the report in the Power BI Service adding in an Active Directory Security Group which has the reveant users included.

I test this functionality and it works fine, Again in test, data is filtered by Operating Company.

When a user from my domain accesses the report, the data is filtered correctly, but when a user from a different domain accesses the report, no data is displayed and all visuals display a cross in them. Both users are in the same AD Security Group.

Users in the AD Security Group have viewer access to the Workspace.

Is this an issue with the way the AD groups have been created as it appears not to work for users outside of my domain?

Any assistance appreciated.

[v-lid-msft · Accepted solution]

Hi @msommerf ,

The RLS with AD Security Group works fine on my side as following, do you mean add the group as the role? Or use the dynamic RLS role?

Best regards,

Community Support Team _ Dong Li
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[v-lid-msft · Accepted solution]

Hi @msommerf ,

The RLS with AD Security Group works fine on my side as following, do you mean add the group as the role? Or use the dynamic RLS role?

Best regards,

Community Support Team _ Dong Li
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[msommerf · Accepted solution]

Many thanks for responding on this.

I have solved the issue.

I removed the AD Groups which were created and setup O365 Distribution Lists and added my users to the list.

The RLS is now working correctly across all domains.

Kind regards

Mark.