Advance your Data & AI career with 50 days of live learning, dataviz contests, hands-on challenges, study groups & certifications and more!
Get registeredJoin us at FabCon Atlanta from March 16 - 20, 2026, for the ultimate Fabric, Power BI, AI and SQL community-led event. Save $200 with code FABCOMM. Register now.
hello
my client asked me:
Can we define security in power BI by user profile via AD? and not going through line-level security in power bi desktopthanks
sabrina,
Solved! Go to Solution.
@SLI,
You can import email addresses of users from AD to Power BI Desktop, then use USERNAME() function to implement dynamic row level security. You can review the following blog to get more details.
http://radacad.com/dynamic-row-level-security-with-power-bi-made-simple
Regards,
Lydia
@SLI,
You can import email addresses of users from AD to Power BI Desktop, then use USERNAME() function to implement dynamic row level security. You can review the following blog to get more details.
http://radacad.com/dynamic-row-level-security-with-power-bi-made-simple
Regards,
Lydia
Thank you Lydia for your answer
i am beginning to deepen my knowledge of power bi, so i have lots of questions,
When, we are on power bi and we want to publish on dynamics respecting the roles assigned to each user present in the CRM, how do we do it?
Also I would like to know if it is possible to go from an entity in CRM example "accounts" to a synthetic view in power bi of this entity? I know that the opposite is possible using the url of records
thanks in advance
sabrina,
@SLI,
I am not very sure about your requirement. Basically, you would need to recreate the role in Power BI Desktop using username() function. Without RLS, it is not possible to directly display data for users based on CRM role.
Regards,
Lydia
effectively i would to use the security based on the profile that is defiened in AD and not by RLS
(the question about the CRM was independant i wanted just have an idea about that, i will come back to this topic later)
So i will use the table extracted from the Active directory, then i will defined the Role on this table by using RLS and the username() function Then i publish the report on the portal of power bi
logically when the user will connect to it power bi he will see only what we have shared with him, is it right?
best regards,
sabrina,
Advance your Data & AI career with 50 days of live learning, contests, hands-on challenges, study groups & certifications and more!
Check out the October 2025 Power BI update to learn about new features.