jeremy on 28 Nov 2018 23:25:49
ASAP need to be able to use modern o365 groups for RLS. You recently updated workspace access use O365 groups, please extend the functionality to RLS.
https://docs.microsoft.com/en-us/business-applications-release-notes/October18/intelligence-platform/power-bi-service/workspaces-azure-ad-groups
- Comments (12)
- Merged Idea (4)
RE: o365 groups for RLS
Workspace access has been enabled for Office 365 groups - however with the new fabric roll out, to view reports through an app, access has to be shared for the underlying lakehouse which doesn't support Office365 groups. You either need to add the 365 group to the workspace which undermines the ability to use audiences OR use security/distributed group types - which adds a layer of complexity in group management and is not aligned with the push to 365 groups.
RE: o365 groups for RLS
I have a lot of reports that I need to share. Due to access control by IT the only available option to work with (in groups) is office 365 groups. These groups cannot be used for RLS or report sharing. I would like to submit the idea that all group forms should be enable to be used in every way (so RLS, rapport sharing enz.).
RE: o365 groups for RLS
As per MS document the M365 group doesn't support RLS Security. Users has a huge business impact due to which it is not possible to add each users separately. By adding this functionality to Power BI can help the users to make there work easy and user friendly.
RE: o365 groups for RLS
It appears that the groups used to control access to reports are not consistent with the groups used for roles in RLS.
As I understand it, after quite a bit of testing and research:
Power BI groups:
- Allow you to share reports and dashboards with a user community, controlling access - works great
- Cannot use an existing Office 365 security group, or add an Office 365 security group as a "member"
Roles defined for Row-Level Security:
- Can control what data a user sees - very helpful, works fine, I just need to learn DAX better
- Cannot add a Power BI group as a "member"
So it appears I have to set up two different groups to use these two features, and make sure I keep my users and groups synchronized manually? What a headache!
It would be very helpful if I could use an existing security group as the group for sharing reports and dashboards, and also have the option to use an office 365 or universal group there but add an existing security group as a member of the group.
And RLS roles should be able to use a Power BI access group as a member, and/or an existing security group as a member.
This will greatly simplify management, and provide much needed flexibility.
RE: o365 groups for RLS
Totally agree on the importance of this feature; especially for external collaboration. It's not possible to add external AAD users to domain security groups / Distribution Lists. So this "gap" must be filled ASAP.
RE: o365 groups for RLS
As every Teams group is a M365 group this is a very important feature.
RE: o365 groups for RLS
Yes please!!! Just integrate it with Teams and Office 365
RE: o365 groups for RLS
This will make life easier for us all
RE: o365 groups for RLS
Hi Jeremy. I also need this badly. But I cant find any other threads with the exact same feature. Could you please attach a URL in this thread so I can go in and vote for the other ones as well? :)