For Dynamic Row Level Security do I still need to add members on power BI service?

Hi ananda31,
Thank you for reaching out to the Microsoft fabric community forum. Also Cookistador, for his inputs on this thread. I have identified few workarounds that may help resolve the issue.

Thank you for your detailed question and commendable work on implementing Dynamic Row-Level Security (RLS) using a SQL-based user mapping and USERPRINCIPALNAME(). Your filtering logic is correctly configured.

Regarding your inquiry:

Even with Dynamic RLS, users must still be explicitly assigned to the RLS role in the Power BI Service under:

Semantic Model → More options → Security → Add members

This step activates RLS for those users. Once added, the DAX logic (like USERPRINCIPALNAME()) dynamically filters the data based on your SQL mapping.

To streamline the process of adding users, you can:

• Add an Azure Active Directory (AAD) security group to the RLS role.
• Manage user membership via the AAD group, which offers better scalability.
• (Optional) Utilize Microsoft Entra ID dynamic groups, if available in your organization, to automate group membership based on attributes like department or title.

If this post helps, please give us ‘Kudos’ and consider accepting it as a solution to assist other members in finding it more quickly.

Thank you for using the Microsoft Community Forum.