Dynamic RLS with AAD groups with Organizational Hierarchy

[Anonymous]

Hi,

I'm trying to test Dynamic RLS and using AD groups for RLS in order to keep this more simple to maintain. 

I have a dimension table for organziation, with where I have created levels 1-5 from the PATH() function. I have merged this table in PQ with the AD email belonging to each department and or organization. This has a one-to-many relationship with my fact sales table. Using a slicer in PBI Desktop works fine. I have created the role as this:

PATHCONTAINS(OrganisasjonsID[Path],
MaxX(
Filter(
OrganisasjonsID,
[AD_group_email] = USERPRINCIPALNAME()
)
, OrganisasjonsID[Selskap Childpartynumber]
)
)

Testing this in Desktop works as expected. However, when i publish to my workspace and test the role, it shows noe data. If I try to type one of the email adresses, then it tells me that the group does not have access to the data.

The AD group I'm testing with is a worksapace viewer.

Can anyone help me with this?

Thank you so much!

[v-yinliw-msft]

Hi @Anonymous ,

Do you add this group to the workspace? 

Also you can refer this link:

Solved: Dynamic RLS using Azure AD Dynamic Groups - Microsoft Power BI Community

Hope this helps you.

Best Regards,

Community Support Team _Yinliw

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[Anonymous · Accepted solution]

Hi @v-yinliw-msft ,
Yes, the group is added to the workspace. I realized now that you can use groups for RLS, but I also need a table for each individual email in order to get the RLS in my report to work. You can't use group email connecting to table. 

Thanks