Forum Discussion
Dynamic RLS using Azure AD Dynamic Groups
We have several dynamic groups in Azure AD that we'd like to utilize for RLS, but PowerBI doesn't seem to be able to see those groups.
Hi, AaronS
You can use the following groups to set up row level security.
- Distribution Group
- Mail-enabled Group
- Security Group
Note, however, that Office 365 groups are not supported and cannot be added to any roles.
This is the relevant document, hope to help you:
https://docs.microsoft.com/power-bi/admin/service-admin-rls#working-with-members
Best Regards,
Community Support Team _Charlotte
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
6 Replies
Hi, AaronS
You can use the following groups to set up row level security.
- Distribution Group
- Mail-enabled Group
- Security Group
Note, however, that Office 365 groups are not supported and cannot be added to any roles.
This is the relevant document, hope to help you:
https://docs.microsoft.com/power-bi/admin/service-admin-rls#working-with-members
Best Regards,
Community Support Team _Charlotte
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
v-zhangti your answer doesn't really address the question. A security group is a Group Type within AAD, while a Dynamic User is a Membership Type (see screenshot below). Nothing in the RLS documentation mentions a restriction in terms of Membership Type, so AAD Security Groups with Dynamic Users should work for RLS. Please advise.
Follow up: I tested Dynamic security groups in AAD, they get recognized and properly work for Power BI RLS.
