Automating Power BI Governance: How dynamic security groups can solve 95% of your sharing needs
summary
Claims that dynamic security groups in Entra ID solve about 95% of sharing needs by auto-updating membership when HR changes department data, demonstrated end-to-end: export HR CSV, pull Azure AD user attributes via the Graph API, compare and reconcile with Power Query (append, unpivot, pivot, inner join) to find mismatches, then map apps to department groups so new hires gain access and leavers lose it automatically. Specific caveats: attribute naming, external users, and coordinated renames.
AI-written summary · about
chapters (11)
- 0:00Power BI governance challenges
- 6:10Traditional security groups fail
- 9:43HR data accuracy for security
- 15:18Dynamic security groups with metadata
- 17:46Demo: dynamic group updates
- 21:20Automating HR data comparison
- 27:44Handling exceptions and external users
- 32:19Risks of HR renaming changes
- 34:05Static groups still necessary
- 35:51Best practices for security owners
- 38:11Q&A
related talks
49mThe Power BI secret sauce: Security and governance
44mSuccessfully collaborate with externals in Power BI
43mKeeping up with your Power BI Tenant Administration
33mWhat is Governance and why Power Automate can help here?!
19mPushing Your Power BI Potential: A Comprehensive Health Check for Improved Performance and Security
44mSure, Let Business Users Build Their Own. What Could Go Wrong?
18mEmpowering Business Through Data
45mRebooting your SME Data Analysis Strategy