Forum Discussion

SamTrexler's avatar
SamTrexler
Helper IV
10 years ago
Solved

Groups for access versus groups for roles?

It appears that the groups used to control access to reports are not consistent with the groups used for roles in RLS. Is this correct? If so, there will be a big headache managing users and their ac...
  • v-qiuyu-msft's avatar
    v-qiuyu-msft
    10 years ago

    Hi SamTrexler,

     

    1. "If I understand you correctly, the Power BI group will control access to the reports and dashboards, but has nothing to do with RLS. RLS has to be defined and managed separately, and separate groups set up for that if needed. Is that right?"

     

    Yes, you are correct. Power BI group and RLS are different features, they are configured separately.

     

    2. could you clarify for me your statement that "if you create a Power BI group, and set a member as group admin, the user can share the dashboard with Office 365 distribution group" (emphasis mine)? According to my security admin, "The only groups available in AD are office 365 groups, distribution, dynamic distribution, security and universal." Which type(s) of groups are you referring to with these two phrases? My testing isn't working as expected, so I need to know which types of groups work for this.

     

    AS you said "If make make him an Admin of the group, he can edit the reports shared with the HelpDesk group; and", I assume the member is a admin of the Power BI group, and explain the RLS is not applied for this member in this scenario.

     

    What I mentioned  "user can share the dashboard with Office 365 distribution group" is that . And I have tested in lab about add Office 365 security group as a member of RLS role and it's working.

     

    Best Regards,
    Qiuyun Yu