Forum Discussion
RLS works when I add People, errors for AD Group
Hello,
I've created up a report using RLS. The filter is set up in desktop based on USERPRINCIPALNAME().
When I go into the service and add an individual person as a member of the role, everything works correctly.
If I remove that individual, and instead add the AD Group that they belong to as a member, then they are able to open the report but all visuals display the following error:
My goal is to use RLS to filter data at individual user level, without having to manage users one at a time for each and every data set. I found a number of forum posts that indicate adding groups as members solves this problem.
Is there perhaps some issue with the Azure AD group setup? My IT admin handled this step, and I wasn't able to find much documentation.
Thanks!
Jason
Hi Anonymous ,
Could you please check what is kind of group in Azure AD you are trying to assign with the roles of RLS? Based on this document, You can add a member to the role by typing in the email address, or name, of the user, security group or distribution list you want to add. You cannot add Groups created within Power BI.
Based on my test, it works fine with the Serucity group created in Azure AD.
Best regards,
4 Replies
v-lid-msftCommunity Support
Hi Anonymous ,
Could you please check what is kind of group in Azure AD you are trying to assign with the roles of RLS? Based on this document, You can add a member to the role by typing in the email address, or name, of the user, security group or distribution list you want to add. You cannot add Groups created within Power BI.
Based on my test, it works fine with the Serucity group created in Azure AD.
Best regards,Hi Dong Li v-lid-msft ,
Appreciate your help. It was an issue with the security group setup.
What is the best way to add all users to a security group?
It works when we add individual users to the security group, but we'd like to give everyone access without having to add users one at a time.
Thanks,
Jason- v-lid-msft
Hi Anonymous ,
Based on this document, We can Using Azure Active Directory (Azure AD) portal to add a large number of members to a group by using a comma-separated values (CSV) file to bulk import group members.
Best regards,