Integrating Azure Active Directory Groups with Power BI Service to manage roles.

[Anonymous]

Hi,

I already have Azure Active Directory Groups created and I want to integrate them with Power BI Service to manage roles.

So currently I'm adding list of users as members in the role created but now I wish to add the Azure AD group alias as a member so that I don't need to add 1000s of users to that role.

Can anyone please help in understanding how to proceed with this?

Thanks.

[v-qiuyu-msft]

Hi @Anonymous, 

You can go to Power BI service, find the dataset, go to Security Interface, then add the group as a member of desired RLS role. See: https://docs.microsoft.com/en-us/power-bi/service-admin-rls#manage-security-on-your-model

Best Regards,
Qiuyun Yu

[Anonymous]

Hi v-qiuyu-msft,

I want to add Azure AD group name as a member instead of any user email address.

ex - below 3 email addresses are grouped together as UserGroup1 in Azure AD. Now I am trying to add UserGroup1 as a member for the role but is not giving me the expected result. below 3 users have access to country = France only .

When UserGroup1 is added as a member for France Role, it must show France country only for these 3 users in the group.

when I am adding below 3 email addresses individually as members then its working fine. But instead of adding 3 members I wish to add 1 group that has 3 ids in it beacuse the number of users are in 1000s and its difficult to add or remove every user's email id in Power BI Service. it is easy if we add or remove users from group alias created in Azure AD and at the same time it works in Power BI Service.

Users

abc@xyz.com

abc1@xyz.com

abc2@xyz.com 

[Kpham]

Im trying to achieve the same. I want to create a navigation page and based on a table maintain which azure active directory group can see a page. the work around is to maintain the table based on user login id or an AAD export. But both alternatives are not amazing 

[sdemei]

I am also trying to achieve the same as people keep changing departments/groups so manually adding and removing people from the RLS is a headache. 

If you can use User groups this will make the upkeep must faster and secure.