Join us at FabCon Atlanta from March 16 - 20, 2026, for the ultimate Fabric, Power BI, AI and SQL community-led event. Save $200 with code FABCOMM.
Register now!To celebrate FabCon Vienna, we are offering 50% off select exams. Ends October 3rd. Request your discount now.
Hi,
I have a problem where a user changed Country within Group and thus the email address was changed. This change was made to AD after the PBI reports and AD groups had been created. Currently the model has the correct email address and in PBI Desktop I can see all the correct data based on RLS using view as function with the user's email address. So far the view as has been 100% correct of evaluating if user sees correct data in PBI Service. Problem is that the visibility in PBI Service is zero. The reports are available but none data is seens. I already tried to remove the AD group from Service Security page and add it again but that did not help.
Any ideas?
"This change was made to AD after the PBI reports and AD groups had been created. "
Please delete the previous email from AD group, then add the new email address in the AD group.
"in PBI Desktop I can see all the correct data based on RLS using view as function with the user's email address. "
in PBI Desktop, you use the user's email address to view data instead of the AD group's email address,
then in PBI Service, you add the AD group's email address in Dataset->Security->add a member to the role by typing in the email address,
right?
After email address was changed,
First, please delete the useless email address from Ad group, then add this new one,
Second, in PBI Desktop and Service, reset up RLS for the dataset and AD group,
(use AD group email in both PBI Desktop and Service),
please follow this article to set up RLS correctly.
Additionally, if this report was published to an App workplace, please re-add the AD group as the member of the Workplace.
If this report was shared to the AD group, please re-share this report to the AD group.
Best Regards
Maggie
To continue and conclude: Can the problem be anywhere else realistically than somehow in the AD group I am using for sharing RLS?