Validate User by Existing List

[ivan_larson_cki]

I have a report where I expect who needs access to be more dynamic than I can keep up with by our normal permissioning. To get around this, I'm planning to user a link that gives everyone in our organization access, but then limit access to data within the dataset to a list of valid users I'm loading from another system. If the user is on that list, they should have access. Otherwise, the data in the report should not be visible.

RLS is not an option because users get an error unless I assign them individually to a role. I'm trying to add a filter in the report based on USERPRINCIPALNAME() matching the email on the table listing valid users, but I'm not finding a way to do this given that USERPRINCIPALNAME() is only valid in a measure. Is this possible?

[lbendlin]

Read about dynamic RLS.

[ivan_larson_cki]

Yep, I've read up on it. But everything I've found on it (such as this article: https://radacad.com/dynamic-row-level-security-with-power-bi-made-simple) still requires adding users individually to the Security list in PBI Service, which is what i'm hoping to avoid.

[lbendlin]

You can choose to use Distribution Lists for app access. But yes, at some point these need to be maintained too.