Workpace - AD security groups not working for new workspaces

[Anonymous]

1. Hi.
   
   I have a problem using AD groups for managing workspace permission for newly created workspaces in Power BI service.

1. I create new workspace
2. 👷🏻Assign permissions using a AD security group. "Member" role in the workspace 
3. ⛔Members of the AD group can not access the workspace in Power BI service. Even though they should have permisision through the AD group

Does somebody now what is wrong?

I have tried waiting 12 hours, and the same behaviour occurs for several new workspaces.

Also note: The memebers of the AD group can access the workspace if they

- they are given permission individually

- the same permission removed

E.g.

1. Create new workspace
2.  👷🏻Assign permissions using a AD security group. "Member" role in the workspace 
3. ➕Assign permissions to each member of the AD group
4. ➗Remove permissions to each member of the AD group
5. ✅Now the members of the AD group sees the workspace,

Kind regards

[SteffenK]

Hey Cosm,

any luck solving this issue? We are experiencing the same and we don't really understand the issue. Everything is configured correctly, but the users only have access if you add and remove them. 

[Anonymous]

Hi. 
After some time, the described problem was not relevant so I did not troubleshoot it more in detail.

However, some suggested that waiting for synchronization of security groups might be the cause.
So maybe you should check if waiting 1 day or so solves the problem.

If that does not work, maybe some other have experienced the same problem and solved it.

[Anonymous]

Hi, I thank you for the reply. I will check out the points you suggested, and see if any works

[Anonymous]

Hi @Anonymous ,

Based on the information you have provided, you assign roles to the security group but members of the security group do not have access to the workspace. You can troubleshoot the issue by following these steps:

1. Ensure that the security group in question is an email-enabled security group or a Microsoft 365 group, as Power BI workspace access relies on these types of groups.
2. Verify that the AD security group membership is properly synchronised with Azure Active Directory. Changes to group membership in AD may take some time to be reflected in Azure AD, which in turn affects Power BI. due to a delay in the web page when assigning roles to groups. You can try refreshing the page.

Please feel free to let me know if you have any questions or concerns.

Best Regards,

Ada Wang

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[manohar_punna]

Is there a way to confirm this? As Microsoft documentation does not specify this limitation. According to this documentation - (https://learn.microsoft.com/en-us/fabric/fundamentals/give-access-workspaces)

Enter name or email, select a role, and select Add. You can add security groups, mail-enabled security groups, distribution lists, Microsoft 365 groups, or individuals to these workspaces as admins, members, contributors, or viewers. If you have the member role, you can only add others to the member, contributor, or viewer roles.

[manohar_punna]

Is there a way to confirm this? As Microsoft documentation does not specify this limitation. According to this documentation - (https://learn.microsoft.com/en-us/fabric/fundamentals/give-access-workspaces)

Enter name or email, select a role, and select Add. You can add security groups, mail-enabled security groups, distribution lists, Microsoft 365 groups, or individuals to these workspaces as admins, members, contributors, or viewers. If you have the member role, you can only add others to the member, contributor, or viewer roles.