Implement Row Level Security for Checking the Access for the Logged in User

[Anonymous]

Hi

For a logged in user I want to verify the access level with Azure AAD groups, to get the list of subscriptions users have access to .

Curently I am using the function USERPRINCIPALNAME() for checking the email ID of the logged in user with the table column . However I want to check with Azure AAD groups . Is there a different function that I need to use .

Eg I have a table with list of Azure Subscriptions and corresponding AAD group name assigned (which has permissions on respective subscription), So I want to check the logged in user email Id and verify with the AAD group to confirm whereall the logged users have access to.

Please suggest. 

[v-yiruan-msft]

Hi @Anonymous,

I’m trying to understand your requirement in case… According to your description in the case, assume that there are 2 below table: table 1 (include subscriptions list and the respective group name)  and table 2(include group and user info). What you want is it will got the subscription “sub1” when the user u1/u2/u3 login, and it will get the subscription “sub2” login when user u4/u5 login? If my understanding is correct? If yes, you can refer this documentation to get the expected results. If no, please correct me and provide me more details. Thank you.

Table1

Azure Subscriptions	AAD group name
sub1	group1
sub2	group2
AAD Group	Users
group1	u1
group1	u2
group1	u3
group2	u4
group2	u5

Best Regards

Rena

[parry2k]

@Anonymous you can use Graph API to get data from AAD. More info here. Would appreciate Kudos 🙂 if my solution helped.