Forum Discussion

nverret's avatar
nverret
Frequent Visitor
8 years ago
Solved

Adding AD Security groups as Gateway Data source Users

Hi,

 

I'm trying to add an active directory security groups for a Gateway data source Users. When typing the groups name they are found, but when i try to add them to the users list i receive this error message: "These email addresses are invalid or duplicate: [GROUP NAME]"

 

Did i miss something?

 

 

Thanks!

Need Help

12 Replies

  • Anonymous's avatar
    Anonymous
    Not applicable
    6 years ago

    Hi all

    I'm also experiencing some issues with it.

    It seems that the group needs to have the property: MailNickname with a valid email address.

    The problem is we don't have exchange in the cloud and also I'm not syncing local AD to cloud AD, so when I want to create a security group with a command like this (note that the email address is invented not real)

    New-AzADGroup -DisplayName "PBI_Lab_FCM" -MailNickname "[email protected]"

    I got the error:

    New-AzADGroup : Invalid value specified for property 'mailNickname' of resource 'Group'.
At line:1 char:1
+ New-AzADGroup -DisplayName "PBI_Lab_FCM" -MailNickname "PBI_Lab_FCM@autologic ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (:) [New-AzADGroup], Exception
    + FullyQualifiedErrorId : Microsoft.Azure.Commands.ActiveDirectory.NewAzureADGroupCommand

    So I cannot create a "classic" security group to be used with PowerBI Gateway :(

    It seems that when you create a group of type: Office 365 an email is automatically created for it (despite if you have or not exchange online). 

    At this point, you will said: what is the problem to use security groups of type: Office 365?

    The problem is that it creates a bothersome Workspace called same as the group name, where anybody can list it's members, and it is not desirable (and you cannot delete this Workspace).

    Any ideas?

    • nickyvv's avatar
      nickyvv
      Most Valuable Professional
      6 years ago

      We also use AAD groups in Power BI workspaces and gateway entries, but don't start on me with O365 groups :smileysad:. The only difference is that we create Mail Enabled Security Groups for this.
      At this link I saw the following code, hope that helps:

      New-DistributionGroup -Name "File Server Managers" -Alias fsadmin -Type security

       

      Did I answer your question? Then please mark my post as a solution!
      My blog: nickyvv.com

      • Anonymous's avatar
        Anonymous
        Not applicable
        6 years ago

        Thank you nickyvv 


        The problem with this is in order to create either a distribution list or a mail enabled security group it rely on exchange email functionality and we dont have it enabled in the cloud :(

        In both cases I got this error

        I'm thinking that I have no other choice to use O365 groups with those annoying workspaces.

        So a workaround is to leave the annoying workspace

        But I cant' leave workspace :( it throws an error 

        So if someone knows how to remove the users from this annoying workspace I will be very happy.

         

        Many thanks.

  • Anonymous's avatar
    Anonymous
    Not applicable
    8 years ago

    HI nverret,

     

    AD users/group not available on power bi gateway, current it support Azure AD users and group.

     

    Regards,
    Xiaoxin sheng

    • nverret's avatar
      nverret
      Frequent Visitor
      8 years ago

      Hi Anonymous,

       

      Thanks for your reply.


      Our AD users/Groups are synced to Azure AD with the AD Connect application. Since i am seeing the groups in the search box, i assumed those groups would be available to use.

       

      Is this right?