Forum Discussion
Users Unable to View Reports Leveraging Composite Models
No, using AD group is good practice.
Your composite Model is a composition of 2 or more datasets from service located in different workspace, is it not? therefore you would need to grant permission to the AD group to those diferent datasets.
It's all within the same workspace. The downstream model uses a semantic model from the workspace plus other database-based data sets, hence why it's a composite model.
I have tried granting the AD group access to the downstream model but it did not help. Nor did it help to grant the individual users access to the upstream model (they already had access by AD group).
they need to have access to those other database-based data sets
It is better that you create a composite Semantic model out of all sources.