Row Level Security using AD-ENT group

---

ldwf wrote:

I don't want to do this creating roles; instead I am hoping this can be done using AD groups.  

---

You cannot create RLS rules without a role. The role is the object that maps the filter rules to AD accounts or groups.

---

ldwf wrote:

I would like to create a simple table of two columns - 1. the AD Group, and 2. An Indicator.  The indicator is the field I would use to determine what the AD Group has access to; it would have values of 0 or 1. 

---

So this pattern is called "dynamic RLS" and what you want to do is not possible as there is currently no way of getting group membership information using DAX. You can add an AD group to the role membership to determine who gets the table level filtering applied, but the actual table would have to have Username and Indicator columns as you can only get the Username() or UserPrincipalName() via DAX.