Hey everyone, I'm hoping to get some insights on a frustrating situation I've run into with Power BI concerning Azure AD groups and permission overlaps. I've been using Power BI for about two years, and it was a solo journey until recently when my colleagues from a non-IT department started trying to access it. I set up a major dashboard that my leadership team requested, granted everyone access to the Power BI app, but now they can't see it. They are getting errors regarding broken measures, which I know aren't true since everything looks fine on my end.
I've narrowed it down to the way permissions are handled with Azure AD security groups, especially since my colleagues have started using those instead of direct access from the app. Microsoft couldn't identify any issues after I contacted them, and the IT team isn't acknowledging the problem even though I've been using Power BI successfully for over a year.
I'm aware that Azure AD can simplify sharing reports, but the way my organization is managing their groups seems to be causing major headaches and impacting my work. Has anyone dealt with similar issues? What steps can I take to prove this problem isn't on me?
3 Answers
It sounds like you've run into a classic permission problem with Azure AD groups. When using Azure AD for permissions, it’s vital to ensure that the groups are set correctly and that they don’t create conflicts with direct workspace access. You might want to check that the users in the AAD groups have all the necessary permissions at both the workspace and application levels. Sometimes, permissions can act weirdly across different groups, causing visibility issues like the ones you described.
I hear you! It can be super frustrating dealing with overlapping permissions. Have you thought about simplifying your access control? One approach is to temporarily remove all group permissions for your end-users and grant them direct access to see if that resolves the issue. It might not be a perfect solution, but it could help pinpoint what's causing the conflicts.

Related Questions
How to Build a Custom GPT Journalist That Posts Directly to WordPress
Fix Not Being Able To Add New Categories With Intuitive Category Checklist For Wordpress
Get Real User IP Without Installing Cloudflare Apache Module
How to Get Total Line Count In Visual Studio 2013 Without Addons
Install and Configure PhpMyAdmin on Centos 7
How To Setup PostfixAdmin With Dovecot and Postfix Virtual Mailbox