Forum Discussion
how to setup RLS for multiple AD group based on country
Hi! You have to have each individual's email address listed in your model with what country they are associated with. To assign the access in service once you publish the model you can use the AD group, but the model itself has to have everyone's individual email ID since that is what they login with.
Hi! You can assign AD groups to the roles in Service, but when you set up the RLS in desktop you need to use people's actual e-mail. When everyone logs in they are using their e-mail and that is what Power BI is looking to check against for RLS. So, you would create a list with all of the emails and the country they have access to, then when they login they will see that data. Here is a great article from RADACAD.
Dynamic Row Level Security with Power BI Made Simple - RADACAD
Hi audreygerred
Thank you for the resposnse
Is there any way I can create a table for where I nominate each AD group to country and when user will log in it will take directly RLS to that specific country only
Hi! You have to have each individual's email address listed in your model with what country they are associated with. To assign the access in service once you publish the model you can use the AD group, but the model itself has to have everyone's individual email ID since that is what they login with.