RLS + Active Directory

[acanepa]

Hi,

Is there a way to connect teams created inside Office with PowerBI RLS? In other words, applied security to different teams inside an organization? As company, we use Outlook as an email solution, alongside office products(Excel and others)

I have found some links that use Dynamic RLS but the input of employee will be static, I'm trying to find a dynamic source of employee that will be maintained by IT when people is fired or join the company.

Also, Is it possible to hide tabs for certain users?. Recently was released this feature and I'm curious if could work with RLS.

Regards,

[Seth_C_Bauer]

@acanepa You could associate a security group to a role and apply permissions to the role. Otherwise if there are varying degrees of access you may need a permissions table in your model to regulate the filter context.

RLS does not work yet for the new "Hide Tabs", although I know MSFT was expecting the question 🙂

[acanepa]

Hi @Seth_C_Bauer

Thanks for the answer. Is it possible to combine those security groups with this solution of Dynamic RLS?

https://community.powerbi.com/t5/Community-Blog/Power-BI-Dynamic-Row-Level-Security-Tips-to-get-it-w...

Also, what is the best practice for creating security groups? Let's say I have a marketing team, where there are marketing executives and a marketing manager, so I have 2 security groups inside one team. Also, employees come and go, so members of the team are constantly changing. Is there a solution where I can have multiple security groups inside one team, without changing the team members? (AD updates the team members automatically).

It's possible that I'm wrong in some assumptions.

Regards,