Forum Discussion
AD groups in Power BI (Office 365) groups
Anonymous
Is this a possibillity today? No
If not, will it be in the future? Don't know
If not, what is the "best practice" solution in this case? My typical approach is to use Group workspaces to organize departments of Report Authors and use them as the central point to share reports with end users. In this manner, you can share a dashboard with an AD group with no issues, and the reports are all managed in one location.
As opposed to creating a seperate Group Workspace for a set of individuals. This also includes the problem that now the end user has to hunt around several Group Workspaces to try to find reports if they belong to several Groups. Whereas with the first approach and good naming standards, everything is in their workspace to be viewed.
Anonymous Yes. I don't want to be in the business of User management in Power BI.
If I want to share a dashboard to 100 users, let the access be dictated by IT and AD.
When I tested sharing to an AAD Security Group I ran into some issues in revoking access. Members who were removed from the AAD Security Group retained access to the shared content in Power BI Service (as well as the report embedded in SharePoint Online). Also, when we revoked access to the entire AAD Security Group inside of Power BI, the individual members of the AAD Security Group still retained access.
Has anyone else had this issue, or is anyone aware of a resolution?
Amie This is definitely disconcerting if that is the case. I assume the sharing was done via dashboards and that only the AAD group was shared too, and the individual users were not also shared to as well...
And for the second case, you stopped sharing with the group and the entire group could still see the dashboard? How soon after the removal did you check, and if it was awhile later, was it still the case? Just making sure it wasn't a timing issue, in that it would take a bit to remove the permissions across the environment.
Also - I would suggest if this is actually the case, that you create a seperate post since this one was already closed.