Is neccesary a security table with all the user of a AD Group with the dynamic RLS in Power BI?

[_pagaca_]

Hello.

Currently I have a report that works with dynamic RLS, so I assign the users to the only role created (with USERPRINCIPALNAME() in the tables I am interested in) and add them to a table that is filled manually indicating the email of the users and the ID related to the data they can access.

So far so good and the rls security works. But now, I want to use security groups instead of users individually for the dynamic RLS.

My doubt is if the system is going to continue working as it is or it is necessary to modify it a little, because in the first my tests introducing the email of the group in the role and in the security table causes that the users that are inside do not have access to the report, so it makes me think that although in the section of roles I can add the group, for the security table I have to continue introducing the emails individually.

Am I right?

Thanks in advance

[_pagaca_]

Thanks! 

I am going to try the workaround of trying to get the users of that group from power query to try to speed things up. I have seen on the web that in principle it is possible but I am still not able to do it. Otherwise I will open another post here in case someone knows 🙂

[audreygerred · Accepted solution]

Yes - in the security table that is in your dataset, keep the individual e-mails, but when you publish to Service and add people to the role you created you can use the group there instead of the individual e-mails.