RLS for groups defined in Dynamics CRM

[Anonymous]

Hello all,

I've got a following case:

There are 300+ Accounts stored in Dynamics CRM, and each Account has a number of Contacts associated, and each of these Contacts have an access to PBI service.

Now, there are some PBI reports created, that present sales information for those Accounts.

Only sales information related to Account that Contact is associated to in CRM can be shown for a Contact in the report.

From what I've researched up to now, the one way is to create AAD/Office group for each of the 300 Accounts (300 separate groups), add Contacts to those groups, and create roles in PBI desktop file accordingly, which sounds more than very time consuming task.

Or maybe some kind of an additional table in PBI with Accounts + Contacts and then dynamic filtering through UPN?

Maybe there are other options that I'm missing?

I would like to get some opinions from more experienced users, as each of the above tasks require some time to implement, and my time for that is unfortunately very limited.

[v-lionel-msft · Accepted solution]

Hi @Anonymous ,

In fact, there is no other way except the two methods you described. For details, you can refer to this article.

How to Set Up Row Level Security (RLS) in Microsoft Power BI 

"From what I've researched up to now, the one way is to create AAD/Office group for each of the 300 Accounts (300 separate groups), add Contacts to those groups, and create roles in PBI desktop file accordingly, which sounds more than very time consuming task."

Maybe this method is more suitable for you.

Best regards,
Lionel Chen

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.