Forum Discussion
Implementing RLS with Office365 Groups Vs Azure AD Groups
Situation: I have implemented dynamic RLS to my pbix file and have uploaded to PowerBI service. The report will be used by a large number of users both internally and externally.
Question: As a result of there being a large number of end users I want to assign a group to the role instead of indiviudally assinging each user to the role (and having to maintain this). I have created some Office 365 groups however these are not appearing, with the following error message:
"One or more of the email addresses are outside your organisation"
Is it possible to use Office365 groups for this purpose or do you have to use AzureAD Groups? I know there is a comprehensive article on Dynamic RLS provided by Microsoft, however it seems to skim over this topic.
Hi Anonymous ,
Based on this document, You can add a member to the role by typing in the email address, or name, of the user, security group or distribution list you want to add. You cannot add Groups created within Power BI. You can add members external to your organization.
Please also refer to the following thread:
https://community.powerbi.com/t5/Service/Row-level-security-using-AD-groups/td-p/300732
https://community.powerbi.com/t5/Service/Row-level-security-for-more-than-1000-users/td-p/459475
Best regards,
Community Support Team _ Dong Li
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
3 Replies
Hi, you can add an Office 365 group to an RLS role. The problem here is the external users. Try editing the group and only keep the company users.
Then check some documentation about external users to know how to share with theme and be sure to know the limitations and considerations. Some links about it:
https://powerbi.microsoft.com/en-us/blog/tag/external-sharing/
https://docs.microsoft.com/en-us/power-bi/service-admin-azure-ad-b2b
Regards,
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Hi Anonymous ,
Based on this document, You can add a member to the role by typing in the email address, or name, of the user, security group or distribution list you want to add. You cannot add Groups created within Power BI. You can add members external to your organization.
Please also refer to the following thread:
https://community.powerbi.com/t5/Service/Row-level-security-using-AD-groups/td-p/300732
https://community.powerbi.com/t5/Service/Row-level-security-for-more-than-1000-users/td-p/459475
Best regards,
Community Support Team _ Dong Li
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
