Can you use GROUPS with Power BI Row-Level Security (RLS)???

Lots of folks ask if you can use groups with Power BI Row-Level Security (RLS). Patrick answers that question!

*******************

Want to take your Power BI skills to the next level? We have training courses available to help you with your journey.

*******************
LET'S CONNECT!
*******************

***Gear***

#PowerBI #GuyInACube

[harihujan]

Just in time when I need to add the groups in RLS. Thank you Patrick

[sohyangk.]

A day late to find out but never too late! Thanks Patrick!

[gabrielmenezes]

I'm still waiting for the Default Role for enabling dynamic RLS to any user coming into the report. It would be perfect and elegant

[bijilashobanabalakrishnan]

Hi Patrick, Your videos are very informative and useful. Could you make a video on Dynamic Page level RLS? There is no such direct feature available now.

[tunjivictor]

Hi Patrick, your videos are always my go to on PowerBI. Thank you for how you present them. I tried the implementing RLS using a mail enabled security group but it is not working. Could you think of something I am missing? Thanks.

[peterhoogendoorn]

Hi Patrick, really liked this video! Still I don't feel like it's actually dynamic. I still have to manually add all the users in a list to check their email address against their UPN. Can I somehow enter the groups here? So that instead of filtering on email = UPN I could say department = group? That way I only would have to change the source when departments change.


I'm working with AS and know something like this is possible, I just don't seem to do it correctly. Thanks in advance for your help!

[Andrew-tijn]

Hi Patrick, I was using groups for RLS I believe back in 2018, but I had done that by creating groups within Outlook on Office 365. This worked great for my use as the primary Power BI admin, but I later ran into a snag. When I tried to experiment with other permissions within the Power BI Admin Portal, those groups do not appear there, I believe because the description mentions about Security Groups and I figured that was something outside of my permissions and needed done by the full blown Office 365 admin. Those RLS groups you showed in the example, are those what would be considered Security Groups that could also be used in the Admin Portal to restrict other settings?

[alewa]

Hey Patrick, is something like this available for the on prem (repot server) version of the product?

[sujitkadam]

Hi Patrick, does RLS works for Azure AD security groups as well? It works for AD but not sure about AAD. Thanks

[SuperSamwel]

How do you deal with users in multiple roles with different else and ols? I have an Enterprise days set and was hoping to have business units manage their groups but due to additive rls, users are getting errors accessing. Also have set up roles on each fact table. Currently trying to set rls type filters on the measures to work around. What do you think? Btw, thank you for many great and useful guidances!

[PavanKumar-vihd]

Hi Patrick
where to create security groups inside power bi or any other place to create groups

[chrisnisbet]

Off topic, but can you have a tooltip per entry to a table/matrix?

[shraddhabatwalkar]

Hey, when you create rls at desktop level is there any dax which will help us to compare similarly to the user principal name.. our custome doesn't want to maintain the security table at power bi level.. just get the logged in user group compare with a specific group name and apply the security..

[shilpamahajan]

Hi Patrick, how can we implement dynamic RLS where we need user belong to a particular region and a particular market see that specific region-market reports? Can you help me in this regard?

[martijncc]

I'm currently working on setting up our PBI Service environment. We have a local active directory (that I can access using a dataflow, to bring in the roles and such). It for now doesn't look likely we'll switch to Azure any time soon and as far as I know there aren't any distribution lists configured. I would love for there to be a way to configure visibility, membership and RLS based on an 'external' user feed. Can you guys give me any pointer on the most efficient way to handle this? If all else fails I will have middle men keep track of their team members in the list wherever possible and do the rest ourselves.

Love the video btw!

[murtazaulhasan]

Hey Patrick,
I have departments and users associated with them and I assigned dynamic RLS using USERPRINCIPALNAME. Even if I share the report with all of my organization (ALL GROUPS), only the users with those departments matching would be able to see the report. Is that correct? If yes, then I think this approach should be better than defining Active Directories, as the directories would be then a lot and maintenace would be difficult. Do give your thoughts on this. Thanks.

[GuillaumeEYNAUD]

You still need to manually manage emails in the dataset. We need to filter by groups directly, not people.

[vog]

What is the right field value one needs to be able to add Azure Active Directory groups? In my organization there are hundreds of groups (including non-Office 365) but only a handful pop up when you type them in the 'Share' section

[bhabaniprasadpanda]

Can we add dynamic distribution group to the RLS?

[eleftheriakoniari]

Hi Patrick! I am using a shared dataset to 2 different reports. Can I apply row level security just to one of them? Thanks!