Not able to add an AAD security group to an app's permissions (duplicate emails)

[tcash]

In the past week I have newly encountered an issue when trying to add some AAD security groups to certain Power BI apps. I get the message "you can't use invalid or duplicate emails" when I attempt to enter a valid security group. I can go to another app and add that same security group.  What might be preventing me from adding that security group to the first app?

[f_giustini]

The issue is still there, do you have any news?

[tcash]

This has no longer  been an issue for me for at least 6 months.

[cbournac]

Sorry but I am also facing this issue.

I want to define Secury for Dataset... One group is OK (no error), others are not and it seems they are setup in the same way.

[cbournac]

Sorry. I think we found the cause. My AD groupe was not defined as "AZURE AD"

[f_giustini]

good for you

I just faced the same identical issue, and in my situation the fact it is not possible to use groups, is still a problem, the question is actually for @_sfrost: might you please update me about the state of "Engineers have identified the root cause and an ETA for a fix will be provided soon"?

[_sfrost · Accepted solution]

@tcash 

It's an ongoing issue which Microsoft is aware of and has updated the support page.

Source: https://powerbi.microsoft.com/en-us/support/

Did I answer your questions? Give a thumbs up and accept this post as solution!

[MihaiR_88]

Although that's an old post, I will leave it here if someone else still encounters this issue.

I encountered the same problem and at least one reason for it seems to be common prefix names for AAD security groups. For instance if you're trying to add a group called CLD-EU-PBI-US and you have other groups called CLD-EU-PBI-US-West and/or CLD-EU-PBI-US-East, you might be getting that error if you're simply copy pasting the CLD-EU-PBI-US group name. That seems to be a Microsoft bug as it tries to map your input string to AAD groups and there is more than one satisfying the query (that's my suspcicion, at least). To solve this, try to remove the last character and then select the group from the drop down or type in the group name by hand and select the correct value when it shows in the field drop down.

Another possible reason might be having deleted/inactive users in the AAD group you're trying to add.