Access to Workspace via Entra security group not working

[RCMPGI]

We're trying to give our support technician users acess to a workspace.

We've got an Entra security group that we've added the users to, and have given this group Admin access to the workspace.

However, none of the group members can access the workspace. It doesn't show in Workspaces and using the direct URL to the workspace gives an error "Sorry, you don't have access to that group. We have taken you to your personal workspace".

If we add one of the user accounts directly to the workspace as an admin, they can access the workspace as expected.

How can we get the access to work for group members?

[RCMPGI]

Hi, it's a security group.
I tried logging out and back in, no change.
For info, logging out and back in is NOT required when a user is explicitly added to the list of admins.

It feels like either the system is broken or the documentation is wrong.

Thanks for your reply! 😀

[tayloramy]

Hi @RCMPGI, 

Interesting. I've seen permissions take a little while to propagate before when groups are used, but I've not encounted a situation where assing a group just doesn't work. 

How long have you waited before testing? Are you able to assign a security group, then wait overnight to see if it applies the security in the morning? 

Here's a dumb question but one that got me before: are you positive that the user you're testing with is actually in the group? I had a situation where a user was in my group, then they got removed and I wasn't told. 

If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution.

[RCMPGI]

It's now been several hours. I'll check on Monday 😆

Yes, the users we're testing are definitely in the group 😀

[tayloramy]

Hi @RCMPGI, 

Several hours should be more than enough time for it to propagate. 

Is there anything unique about your enviornment? Are these groups cloud native or are they synced from an on prem AD server? 

I'm starting to think there's a bug somewhere in your tenant. 

If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution.

[RCMPGI]

It's a native Entra group. It's working fine for other MS cloud things.

[tayloramy]

@RCMPGI This is puzzling. 

I got nothing, you appear to be doing everything correctly. 

I think the best approach would be to open a support ticket with Microsoft so their engineers can figure out what is going on. 

If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution.

[v-achippa]

Hi @RCMPGI,

Thank you for reaching out to Microsoft Fabric Community.

Thank you @tayloramy for the prompt response. 

As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided by the user for the issue worked? 

If your issue still persists, please consider raising a support ticket for further assistance.
To raise a support ticket, kindly follow the steps outlined in the following guide:

How to create a Fabric and Power BI Support ticket - Power BI | Microsoft Learn

Thanks and regards,

Anjan Kumar Chippa

[RCMPGI]

Still not working. I've not had a chance to raise a support ticket yet.

[v-achippa]

Hi @RCMPGI,

Thank you for the response, if the issue still persists, I request you to please raise a support ticket for further assistance, so that the product team can assit you in addressing the issue you are facing. 

Thanks and regards,

Anjan Kumar Chippa

[v-achippa]

Hi @RCMPGI,

As we haven’t heard back from you, we wanted to kindly follow up to check that have you raised the support ticket? Is your issue resolved?

Thanks and regards,

Anjan Kumar Chippa

[tayloramy]

Hi @RCMPGI, 

What type of group is it? That might help us narrow down the problem. 

After you add the group are you getting the user to log out of Fabric and then log back in? THe Microsoft docs call out that the secuirty takes effect on the user's next login - not their current one: 

Give Users Access to Workspaces - Microsoft Fabric | Microsoft Learn

If you found this helpful, consider giving some Kudos. If I answered your question or solved your problem, mark this post as the solution