Row Leve Security only with AZ group

Hi Krish_nidar 

Thank you for sharing this. 
Based on your “no user emails” requirement, here are two clean ways to set up RLS

Option 1 — Easiest (recommended)
Create one role per department and, in the dataset’s Security, add the matching Entra (Azure AD) security group to that role.

• No user table to maintain, no emails in the model—just manage group membership in Entra.

Option 2 — Single role using USEROBJECTID()
Keep a small mapping table of ObjectID → DeptKey, relate it to Departments, and use this role filter
UserPerms[UserObjectId] = USEROBJECTID()

• Still no emails, but we’d maintain the Object IDs.

Do we already have department-based Entra groups?

If yes, I’ll proceed with Option 1 right away.

If not, I’ll set up Option 2 and share the Object ID template.

To know more, please follow this links

https://learn.microsoft.com/en-us/fabric/security/service-admin-row-level-security

https://community.fabric.microsoft.com/t5/Desktop/How-to-use-AD-group-for-Row-Level-Security-in-Power-BI/td-p/2431746

Helpful? Please mark it Accepted Solution ✔️ and give it a Kudos—it helps the community.

Thanks!
Shashi Paul 

Hi Krish_nidar ,
Just wanted to check if you got a chance to review the suggestions provided and whether that helped you resolve your query?

Thank You shashiPaul1570_  and kushanNa  for your valuable inputs.