Forum Discussion
Row level security using AD groups
On Power BI Service, you can add security group as member of a role. See: Row-level security (RLS) with Power BI
In this scenario, you can create security groups on O365 admin center: Create, edit, or delete a security group in the Office 365 admin center. Then add all users into corresponding security group. Now you will not need that "mapping" table in your model.
Regards,
Is it possible to split members of an AD Group into separate RLS roles? I have an AD Group called PBI-Expense with 10 members, say A-J. Then I have 2 RLS roles - Dept1 and Dept2. Can I share the report to the PBI-Expnse AD group and then for RLS add members A-E to Dept1 role and F-J to Dept2 role?
The idea is I want to share reports to large groups by sharing to AD groups. But then for RLS, I want to be able to assign individual members to different roles instead of the whole group to a single role.
Any ideas on how to do this?
Thanks,
Ferdinand
Just finished testing and was able to confirm that individual members of an AD group can be assigned to different RLS roles. Sharing to the AD group gives members access to the report but the RLS role an individual is assigned is what determines what data the user sees.
How do i achieve this?. Any documentation available?.