Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Grow your Fabric skills and prepare for the DP-600 certification exam by completing the latest Microsoft Fabric challenge.

Reply
_pagaca_
Frequent Visitor

Is neccesary a security table with all the user of a AD Group with the dynamic RLS in Power BI?

Hello.

 

Currently I have a report that works with dynamic RLS, so I assign the users to the only role created (with USERPRINCIPALNAME() in the tables I am interested in) and add them to a table that is filled manually indicating the email of the users and the ID related to the data they can access.


So far so good and the rls security works. But now, I want to use security groups instead of users individually for the dynamic RLS.

My doubt is if the system is going to continue working as it is or it is necessary to modify it a little, because in the first my tests introducing the email of the group in the role and in the security table causes that the users that are inside do not have access to the report, so it makes me think that although in the section of roles I can add the group, for the security table I have to continue introducing the emails individually.


Am I right?

 

Thanks in advance

1 ACCEPTED SOLUTION
audreygerred
Super User
Super User

Yes - in the security table that is in your dataset, keep the individual e-mails, but when you publish to Service and add people to the role you created you can use the group there instead of the individual e-mails.




Did I answer your question? Mark my post as a solution!

Proud to be a Super User!





View solution in original post

2 REPLIES 2
_pagaca_
Frequent Visitor

Thanks! 

I am going to try the workaround of trying to get the users of that group from power query to try to speed things up. I have seen on the web that in principle it is possible but I am still not able to do it. Otherwise I will open another post here in case someone knows 🙂

audreygerred
Super User
Super User

Yes - in the security table that is in your dataset, keep the individual e-mails, but when you publish to Service and add people to the role you created you can use the group there instead of the individual e-mails.




Did I answer your question? Mark my post as a solution!

Proud to be a Super User!





Helpful resources

Announcements
RTI Forums Carousel3

New forum boards available in Real-Time Intelligence.

Ask questions in Eventhouse and KQL, Eventstream, and Reflex.

MayPowerBICarousel

Power BI Monthly Update - May 2024

Check out the May 2024 Power BI update to learn about new features.

Top Solution Authors