Power BI

Completed

Enterprise Gateway - Active Directory Security Groups as Users

Vote (41)

on 02 Apr 2016 03:12:58

In the gateway data source I am forced to add each user individually to allow them to create a report off that data source.
Alternately I can create custom groups in o365.
We have already established security groups on our system would it be possible for these groups to be used?
This is an extra layer of security for hundreds of users that has already been solved through active directory synchronization with office 365.

The use case is to add a security group or multiple group to be authorized to create reports off the data source. When we add or take out personnel
from the security group it will propagate up to Power BI.

Administrator on 23 Apr 2016 04:50:14

Security Groups are supported in the Gateway users list - Go to Manage Gateways- Select the Data Source you want those users to create a report off -> Click on Users -> you can add a security group there

Comments (14)

Comments (14)

Godzilla on 06 Jul 2020 00:08:08

RE: Enterprise Gateway - Active Directory Security Groups as Users

If anyone stumbles upon this, the way we got this to work was by adding an email address to the AD Security group Email field. It wasn't even a real email address in our domain. Once we did that, we were able to use our AD Security Group in the Gateway.

Troy Marrick on 05 Jul 2020 23:30:01

RE: Enterprise Gateway - Active Directory Security Groups as Users

Since this is getting no traction, likely due to being closed, I opened another idea with the same subject

https://ideas.powerbi.com/forums/265200-power-bi-ideas/suggestions/35441353-enterprise-gateway-active-directory-security-gro

Bob Hornung on 05 Jul 2020 23:24:54

RE: Enterprise Gateway - Active Directory Security Groups as Users

I'm having this same issue as well. Intellesense sees group but when I select it, I get the 'email address invalid or duplicate'.

Power BI Ideas Admin on 05 Jul 2020 22:58:16

RE: Enterprise Gateway - Active Directory Security Groups as Users

When adding AD group for access to a gateway connection, the AD group is found but when selecting the group receive the message...

These email addresses are invalid or duplicate.

The AD group does not have an associated email address. If using AD groups do they also have to be emailed enabled? Does Gateway access act differently than access in BI Workspaces?