Row-Level Security for 50+ users

[Melissa]

Hi @EverythingZen,

I usually connect to Azure Active Directory, bring in all users within the tenant, create a flags based on AD properties in Power Query, load it as a disconected and hidden table in the model and use that for defining more generic roles.

Some helpful articles can be found here:
https://radacad.com/tag/row-level-security
.

@EverythingZen

I know how to create this within the Power BI file itself by creating a role and after publishing, I’ll need to go to security and add people to those roles based on their email.

Also in my Azure Active Directory I’ve added a Dynamic User Group to identify all Power BI Pro users with these properties (note, you’ll need to verify the assignedPlan.servicePlanId):

user.assignedPlans -any (assignedPlan.servicePlanId -eq "70d33638-9c74-4d01-bfd3-562de28bd4ba" -and assignedPlan.capabilityStatus -eq "Enabled")

But you can create as many dynamic groups as you need by defining, more dynamic membership rules based on AD properties. Instead of adding and maintaining 50+ individual emails, you can add a couple of dynamic groups…

Rules for dynamically populated groups membership - Microsoft Entra ID

Product names and service plan identifiers for licensing - Microsoft Entra ID

I hope this is helpful