Enable USERMEMBEROF() DAX Function for Dynamic Azure AD Group-Based Row-Level Security in Power BI/F
Organizations with large and dynamic user populations require scalable Row-Level Security (RLS) management. The current approach using USERPRINCIPALNAME() and user-to-data mapping tables becomes difficult to maintain as users frequently join, leave, or change responsibilities.
Proposed Enhancement
Make the USERMEMBEROF() DAX function generally available across Power BI Premium and Microsoft Fabric capacities, allowing RLS rules to evaluate Azure AD (Microsoft Entra ID) group membership directly within DAX.
Business Value
Using USERMEMBEROF() would enable organizations to:
- Manage security through Azure AD / Entra ID groups instead of individual user accounts.
- Reduce administrative overhead for large deployments.
- Align Power BI/Fabric security with existing enterprise identity governance practices.
- Simplify RLS model design and maintenance.
- Improve scalability for organizations with thousands of users and frequent access changes.
Current Limitation
Today, USERNAME() and USERPRINCIPALNAME() return individual user identities rather than group membership. While AD groups can be assigned to Power BI roles, dynamic filtering based on group membership is not available without maintaining custom user mapping tables.
This creates significant maintenance challenges for enterprise-scale implementations.
Example Scenario
A security table could contain:
AD GroupRegion
| Sales_NorthAmerica | North America |
| Sales_Europe | Europe |
| Finance_Global | All Finance Data |
With USERMEMBEROF(), RLS could dynamically grant access based on the user's Azure AD group membership, eliminating the need to store and maintain individual user records.
Requested Outcome
- General Availability of USERMEMBEROF() for Power BI and Microsoft Fabric tenants.
- Support within Import, Direct Lake, and DirectQuery semantic models.
- Clear documentation and administration controls for enterprise adoption.
This capability would significantly improve security management, governance, and scalability for organizations adopting Microsoft Fabric and Power BI at enterprise scale.
Recent ideas
Improve support for calculated tables on remote semantic models
When a report is connected to a remote semantic model, Power BI Desktop allows users to create calculated tables and calculated columns based on that remote model. The issue is that this architectur...alaeddinegaaya22 minutes agoNew MemberNew1View0likes0CommentsAllow Bottom-Up Hierarchy Expansion in Power BI Matrix for Financial Statements
Allow Bottom-Up Hierarchy Expansion in Power BI Matrix for Financial Statements Hi, I would like to request an enhancement to the Power BI Matrix visual that allows hierarchies to be expanded from t...Barbarini2 hours agoRegular VisitorNew3Views0likes0CommentsOneLake Catalog full-text and content search
Why is it not possible to search OneLake by item description or even content? So I was thinking about how a user can find a table if they don't know in which lakehouse it is located? Why can't you se...TePe20 hours agoHelper IVPlanned1.1KViews21likes5CommentsAllow External OneLake Data Shares to Be Accepted into Multiple Fabric Item Types
Fabric External Data Sharing provides an excellent zero-copy mechanism for sharing OneLake data across tenants. However, the receiving tenant currently has to accept the share into a Lakehouse. I w...Mourak2 days agoNew MemberNew9Views0likes0CommentsAllow OneLake Shortcut Authentication Mode to Be Changed In Place
OneLake shortcuts support passthrough and delegated authentication, but changing the authentication model currently requires deleting and recreating the shortcut. I would like shortcut authenticatio...Mourak2 days agoNew MemberNew9Views0likes0Comments