RLS and adding people to users group

[Stemar_Aubert]

Hello,

I have the current system where dataflows are feeding a report, published on a premium workspace.

The report is using RLS to handle access, however this creates a heavy workload :

1) Need to add users in the RLS list (excel).

2) Need to refresh and publish the report to include the new names in the RLS list.

3) Need to go into the dataset security online tool, and add each email to the role.

4) Share the report / re-publish the app with, again, the need to add each email to the share.

Is there a better way to handle this ? I've read documentation online but didn't find a tangible solution.

Thanks.

[v-diye-msft · Accepted solution]

Hi @Stemar_Aubert 

On Power BI Service, you can add security group as member of a role. See: Row-level security (RLS) with Power BI

Based on this document, We can use Azure Active Directory (Azure AD) portal to add a large number of members to a group by using a comma-separated values (CSV) file to bulk import group members. Then add all users into corresponding security group. Now you will not need that "mapping" table in your model.

Please also refer to the following thread:

https://community.powerbi.com/t5/Service/Row-level-security-using-AD-groups/td-p/300732

https://community.powerbi.com/t5/Service/Row-level-security-for-more-than-1000-users/td-p/459475

[lbendlin]

Create an AD group per role.  Manage your users in the AD groups.