Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
3 years ago
Solved

Dynamic RLS with AAD groups with Organizational Hierarchy

Hi,

 

I'm trying to test Dynamic RLS and using AD groups for RLS in order to keep this more simple to maintain. 

I have a dimension table for organziation, with where I have created levels 1-5 from the PATH() function. I have merged this table in PQ with the AD email belonging to each department and or organization. This has a one-to-many relationship with my fact sales table. Using a slicer in PBI Desktop works fine. I have created the role as this:

PATHCONTAINS(OrganisasjonsID[Path],
MaxX(
Filter(
OrganisasjonsID,
[AD_group_email] = USERPRINCIPALNAME()
)
, OrganisasjonsID[Selskap Childpartynumber]
)
)

Testing this in Desktop works as expected. However, when i publish to my workspace and test the role, it shows noe data. If I try to type one of the email adresses, then it tells me that the group does not have access to the data.

The AD group I'm testing with is a worksapace viewer.

 

 

Can anyone help me with this?

 

Thank you so much!

 

  • Anonymous's avatar
    Anonymous
    3 years ago

    Hi v-yinliw-msft ,
    Yes, the group is added to the workspace. I realized now that you can use groups for RLS, but I also need a table for each individual email in order to get the RLS in my report to work. You can't use group email connecting to table. 

     

    Thanks

2 Replies

    • Anonymous's avatar
      Anonymous
      Not applicable

      Hi v-yinliw-msft ,
      Yes, the group is added to the workspace. I realized now that you can use groups for RLS, but I also need a table for each individual email in order to get the RLS in my report to work. You can't use group email connecting to table. 

       

      Thanks