Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Find everything you need to get certified on Fabric—skills challenges, live sessions, exam prep, role guidance, and more. Get started

Reply
_pagaca_
Frequent Visitor

Is neccesary a security table with all the user of a AD Group with the dynamic RLS in Power BI?

Hello.

 

Currently I have a report that works with dynamic RLS, so I assign the users to the only role created (with USERPRINCIPALNAME() in the tables I am interested in) and add them to a table that is filled manually indicating the email of the users and the ID related to the data they can access.


So far so good and the rls security works. But now, I want to use security groups instead of users individually for the dynamic RLS.

My doubt is if the system is going to continue working as it is or it is necessary to modify it a little, because in the first my tests introducing the email of the group in the role and in the security table causes that the users that are inside do not have access to the report, so it makes me think that although in the section of roles I can add the group, for the security table I have to continue introducing the emails individually.


Am I right?

 

Thanks in advance

1 ACCEPTED SOLUTION
audreygerred
Super User
Super User

Yes - in the security table that is in your dataset, keep the individual e-mails, but when you publish to Service and add people to the role you created you can use the group there instead of the individual e-mails.




Did I answer your question? Mark my post as a solution!

Proud to be a Super User!





View solution in original post

2 REPLIES 2
_pagaca_
Frequent Visitor

Thanks! 

I am going to try the workaround of trying to get the users of that group from power query to try to speed things up. I have seen on the web that in principle it is possible but I am still not able to do it. Otherwise I will open another post here in case someone knows 🙂

audreygerred
Super User
Super User

Yes - in the security table that is in your dataset, keep the individual e-mails, but when you publish to Service and add people to the role you created you can use the group there instead of the individual e-mails.




Did I answer your question? Mark my post as a solution!

Proud to be a Super User!





Helpful resources

Announcements
Fabcon_Europe_Social_Bogo

Europe’s largest Microsoft Fabric Community Conference

Join the community in Stockholm for expert Microsoft Fabric learning including a very exciting keynote from Arun Ulag, Corporate Vice President, Azure Data.

Power BI Carousel June 2024

Power BI Monthly Update - June 2024

Check out the June 2024 Power BI update to learn about new features.

RTI Forums Carousel3

New forum boards available in Real-Time Intelligence.

Ask questions in Eventhouse and KQL, Eventstream, and Reflex.

Top Solution Authors