dynamic row level security with Azure Analysis Services and Azure AD security groups

[MLurg122]

Hi Everyone! 

Problem:

I want to use Azure AD Security groups for Dynamic Row Level Security in my Azure Analysis Services Tabular Model, but can't manage to import my security groups from Azure AD or even connect to the Azure AD. 

Security groups on AAD exist and I have a web application where my client can add and delete users to these groups (this automatically adds or removes them from the AAD) So far so good. 

In a next step I want to use these Security groups in my Azure Analysis Services Tabular Model for Dynamic Row Level Security.

Why am I doing this? Because my client wants to be able to create Power BI Reports on the basis of my tabular model and his staff should only be able to work with data in accordance to their security group. 

Background:

I am creating the Azure Analysis Services Tabular Model in Visual Studio 2019.

I use input data from an Azure SQL DB

I found plenty of solutions and ways to connect to on prem AD but I cannot manage to connect and use the Security Groups from my AAD. 

Any help, or hint or input is very much appreciated. 

Regards, 

M

[amitchandak]

@MLurg122 , have checked these two?

https://powerbi.microsoft.com/fr-fr/blog/azure-active-directory-and-power-bi/
https://www.fourmoo.com/2020/04/01/power-bi-which-groups-can-be-used-to-set-permissions-in-power-bi/

[MLurg122]

Hi @amitchandak ! Thanks for your input. I have checked both of them before already. The first one is about using AAD for connecting with Power BI and how to set up users and groups who are allowed to access the Power BI Services. Unfortunately nothing on how to use AAD SGs for Dynamic Row Level Security. The second link was my main input on creating everything so far, I was naive enough to assume there is for sure a way to use Azure ADs and not only local AD as described in this blog post. If there is any other resource or idea you have how I could get it working, it would be much appreciated! Thanks anyways