Implementing RLS with Office365 Groups Vs Azure AD Groups

[Anonymous]

Situation: I have implemented dynamic RLS to my pbix file and have uploaded to PowerBI service. The report will be used by a large number of users both internally and externally. 

Question: As a result of there being a large number of end users I want to assign a group to the role instead of indiviudally assinging each user to the role (and having to maintain this). I have created some Office 365 groups however these are not appearing, with the following error message: 

"One or more of the email addresses are outside your organisation"

Is it possible to use Office365 groups for this purpose or do you have to use AzureAD Groups? I know there is a comprehensive article on Dynamic RLS provided by Microsoft, however it seems to skim over this topic.

[ibarrau]

Hi, you can add an Office 365 group to an RLS role. The problem here is the external users. Try editing the group and only keep the company users.

Then check some documentation about external users to know how to share with theme and be sure to know the limitations and considerations. Some links about it:

https://powerbi.microsoft.com/en-us/blog/tag/external-sharing/

https://docs.microsoft.com/en-us/power-bi/service-admin-azure-ad-b2b

Regards,

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[Anonymous]

Thanks for your response. Currently the group only consists of 4 internal users and does not appear as an option in the suggested drop downs and gives the aforementioned error message if it try and add it, so external users would not come into play at this point...

[v-lid-msft · Accepted solution]

Hi @Anonymous ,

Based on this document, You can add a member to the role by typing in the email address, or name, of the user, security group or distribution list you want to add. You cannot add Groups created within Power BI. You can add members external to your organization.

Please also refer to the following thread:

https://community.powerbi.com/t5/Service/Row-level-security-using-AD-groups/td-p/300732

https://community.powerbi.com/t5/Service/Row-level-security-for-more-than-1000-users/td-p/459475

Best regards,

Community Support Team _ Dong Li
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.