RLS works when I add People, errors for AD Group

[JasonStinnett]

Hello,

I've created up a report using RLS. The filter is set up in desktop based on USERPRINCIPALNAME(). 

When I go into the service and add an individual person as a member of the role, everything works correctly.

If I remove that individual, and instead add the AD Group that they belong to as a member, then they are able to open the report but all visuals display the following error:

My goal is to use RLS to filter data at individual user level, without having to manage users one at a time for each and every data set. I found a number of forum posts that indicate adding groups as members solves this problem.

Is there perhaps some issue with the Azure AD group setup? My IT admin handled this step, and I wasn't able to find much documentation.

Thanks!

Jason

[v-lid-msft · Accepted solution]

Hi @JasonStinnett ,

Could you please check what is kind of group in Azure AD you are trying to assign with the roles of RLS? Based on this document, You can add a member to the role by typing in the email address, or name, of the user, security group or distribution list you want to add. You cannot add Groups created within Power BI. 

Based on my test, it works fine with the Serucity group created in Azure AD.

Best regards,

[JasonStinnett]

Hi Dong Li @v-lid-msft ,

Appreciate your help. It was an issue with the security group setup.

What is the best way to add all users to a security group?

It works when we add individual users to the security group, but we'd like to give everyone access without having to add users one at a time.

Thanks,
Jason

[v-lid-msft]

Hi @JasonStinnett ,

Based on this document, We can Using Azure Active Directory (Azure AD) portal to add a large number of members to a group by using a comma-separated values (CSV) file to bulk import group members.

Best regards,

[JasonStinnett]

That should work, thanks again for all your help Dong Li!