Forum Discussion
AD Groups and Power BI
Hello
I am hoping someone can help. I have searched for an answer and indications are my situation should work.
I have a Power BI dashboard that is published to a workspace. It has RLS enabled. All works OK if I use apply individual users. BUT trying to use a group fails. The groups I have;
I have added users to the groups. I then add then to the RLS screen and share the app.
But they dont work, or at least the users dont get access.
Can any one provide any advice?
Thank you
Stuart
Hi Stuart,
My guessing is that you are not doing it the right way. Remember the RLS is applied on the dataset level and it is not recommended to share reports via Worksapces. What you can do and I recommend :
- Remove groups from the Workspace
- Separate Dataset from Report https://learn.microsoft.com/en-us/power-bi/guidance/report-separate-from-model
- Create an App and Publish the report from the Workspace where it is located
- In the App add Adiences for each AD Group
- Go back to the workspace (Do not add groups to it)where the dataset is located
and add the groups as viewers.
Don't forget to set up the security to the dataset as well.
This also is good to know
3 Replies
- aj1973
Community Champion
Hi Stuart,
My guessing is that you are not doing it the right way. Remember the RLS is applied on the dataset level and it is not recommended to share reports via Worksapces. What you can do and I recommend :
- Remove groups from the Workspace
- Separate Dataset from Report https://learn.microsoft.com/en-us/power-bi/guidance/report-separate-from-model
- Create an App and Publish the report from the Workspace where it is located
- In the App add Adiences for each AD Group
- Go back to the workspace (Do not add groups to it)where the dataset is located
and add the groups as viewers.
Don't forget to set up the security to the dataset as well.
This also is good to know
Thank you for your reply. Certainly gets me to thinking what to do. I will follow your advice re splitting.
On this particular item Ive managed to prove that something is wrong in Azure with the AD groups. What, I am not sure as I dont have admin access, so its with my IT department.
- aj1973
What I would recommend as well, is that you create a Power BI report for Audit logs and AD groups. That way you won't need IT department to identify anomalies.
Good luck.
