Maintaining Security by Group

This article provides information on how to maintain security permissions by group in Power BI.

Detailed Information

There are two kinds of groups that can be created to be used to set Permissions in Power BI

  • Option 1: Microsoft 365 group (The group name has "_O365".)
  • Option 2: Microsoft Entra security group (previously called Active Azure Directory)

Pros and Cons

Description Microsoft 365 group Microsoft Entra Security group
Initial creation of the group IT-MS 365 Admin(s) can create this group IT- MS Entra Admin needs to create this group
Maintenance of the memberships Group owner can add/delete member Group owner can add/delete member
Applying to PBI security
  • Need to be applied to the entire workspace
  • Can be applied to dataset
  • CAN NOT be applied to reports
  • Can be applied to row level security(RLS)
  • Can be applied to dataset
  • Can be applied to a report

Please read How to Manage Security Groups in Sharepoint page for instructions for managing the group.  An MS Entra security group is best suited for Power BI workspace administrators who want to manage their audiences within a Power BI app

To request a new Microsoft Entra security group for Power BI reports, please submit the Power BI - Azure(Entra) Security Group Request form.

Environment

  • Power BI
Print Article