Does Entra ID groups work for RLS/CLS in SQL Endpoint?

[govindarajan_d]

Hi All,

I was trying to test the following blog item, where he mentions the use of Entra ID groups for providing RLS and CLS restrictions.

Microsoft Fabric Row-Level Security (RLS) & Column-Level security(CLS) in Warehouse and SQL Endpoint...

But IS_MEMBER function does not work with Entra ID groups :

IS_MEMBER (Transact-SQL) - SQL Server | Microsoft Learn

[Anonymous · Accepted solution]

Hi @govindarajan_d 
RLS and CLS is only supported for SQL database roles. Hence Entra ID groups do not work for RLS/CLS in SQL endpoint.