Forum Discussion

paullondon's avatar
paullondon
New Member
5 years ago
Solved

Access control using organisation Active Directory

Hi All,   A client would like to control access to Power BI using existing Active Directory Roles within their organisation.   For example, they could create roles called bi_sales, bi_operations,...
Data Protection
  • lbendlin's avatar
    lbendlin
    5 years ago

    It is possible, at least partially.

    You can use AD distribution lists to grant access to apps, reports and dashboards.

    You can also use AD distribution lists to control membership in RLS roles (*).  That allows you to fine tune the access not just on report level  but on individual row level.

     

    In addition, OLS (object level security) has been announced recently and might also help you control acces on an intermediate level.

     

    * (or use AD controlled reference tables with individual access rights) 

lbendlin's avatar
lbendlin
Super User
5 years ago

It is possible, at least partially.

You can use AD distribution lists to grant access to apps, reports and dashboards.

You can also use AD distribution lists to control membership in RLS roles (*).  That allows you to fine tune the access not just on report level  but on individual row level.

 

In addition, OLS (object level security) has been announced recently and might also help you control acces on an intermediate level.

 

* (or use AD controlled reference tables with individual access rights)