Register now to learn Fabric in free live sessions led by the best Microsoft experts. From Apr 16 to May 9, in English and Spanish.
Sorry if I posted it in the wrong group
what is the difference between AD group and a role ?
I have an SSAS tabular model and a role is defined like this
DOMAIN_NAME\XYZ_ABC
So XYZ_ABC is the AD group here ?
Solved! Go to Solution.
Hey @Anonymous ,
in Power BI a role is being used to limit what a user can see:
Row-level security (RLS) with Power BI - Power BI | Microsoft Docs
For example you can create a role "Sales_US" and everyone who is being assigned to this role can only see the sales from the United States. Another role could be "Sales_UK" and who is being assigned to this role can see the sales from UK.
How do you assign now the roles?
You can either assign to each individual user a role (Johnny gets "Sales_US", Edward gets "Sales_UK", etc.) or you can assign a whole group of people (=AD group) to a role.
For example you company assigns anyway the whole sales team in the US (including Johnny) to the active directory group "AD_Sales_US". Now you can assign the AD group "AD_Sales_US" to the role "Sales_US" and everyone who is in this group gets the correct role.
Johnny is moving from the sales department in US to UK? He will be transferred by HR or IT to the correct AD group. Then he automatically gets the correct role in Power BI, but also the right access on the network folder as this access can also be managed by AD groups.
Hope that makes sense.
Hey @Anonymous ,
in Power BI a role is being used to limit what a user can see:
Row-level security (RLS) with Power BI - Power BI | Microsoft Docs
For example you can create a role "Sales_US" and everyone who is being assigned to this role can only see the sales from the United States. Another role could be "Sales_UK" and who is being assigned to this role can see the sales from UK.
How do you assign now the roles?
You can either assign to each individual user a role (Johnny gets "Sales_US", Edward gets "Sales_UK", etc.) or you can assign a whole group of people (=AD group) to a role.
For example you company assigns anyway the whole sales team in the US (including Johnny) to the active directory group "AD_Sales_US". Now you can assign the AD group "AD_Sales_US" to the role "Sales_US" and everyone who is in this group gets the correct role.
Johnny is moving from the sales department in US to UK? He will be transferred by HR or IT to the correct AD group. Then he automatically gets the correct role in Power BI, but also the right access on the network folder as this access can also be managed by AD groups.
Hope that makes sense.
Thank you
Covering the world! 9:00-10:30 AM Sydney, 4:00-5:30 PM CET (Paris/Berlin), 7:00-8:30 PM Mexico City
Check out the April 2024 Power BI update to learn about new features.