Exam DA-100 topic 2 question 2 discussion

AD Security groups make the most sense for a business spread across 4 regions. having to change the security permissions in PowerBi every time there is staff turnover is a lot of admin. Adding/removing a security group takes a couple of seconds and is hassle free

C sounds ok. If the sales manager is not added to the right Azure Active Directory Group, he/she will continue to view sales reports for his/her former region, which is the main reason RLS was implemented in the first place.

This can be done by updating the relevant role in the Power BI service or by updating the user's membership in the Active Directory group that is associated with the role. Once the role membership is updated, the sales manager will be able to see the sales records of the new region and will be prevented from viewing records from other regions based on the RLS rules defined for the role. Answer is C because we have no choise to update roles in PBI Service

Option B would be necessary if you needed to make changes to the Row-Level Security settings, but it does not address the specific issue of updating the sales manager's permissions. Option C may be necessary if the sales manager's Azure Active Directory group membership affects their access to the dataset, but it is not the most direct solution to the problem. Therefore, the best option is to manage the permissions of the underlying dataset and update the sales manager's role membership in the Row-Level Security settings.

AD Security groups make the most sense for a business spread across 4 regions. having to change the security permissions in PowerBi every time there is staff turnover is a lot of admin. Adding/removing a security group takes a couple of seconds and is hassle free

Got this in the exam - Aug 15, 2021.

The solution for this use case scenario is covered by RLS security. https://training.bielite.com/topic/implement-row-level-security-roles/

C is correct answer

Members can be user accounts or security groups. Whenever possible, we recommend you map security groups to dataset roles. It involves managing security group memberships in Azure Active Directory. Possibly, it delegates the task to your network administrators. -----------> C Will be my choice

I will go for C

This question was in the exam.

question says this 'You assign the relevant distribution lists to each role', therefore it is C

It's definitely D. The reason being is : "Log into Power BI with your Power BI Account (same account as your O365 or Azure AD Account)" This is when you want to add a user to the TENANT level. (Your organization) But in order to affect datasets RLS you must do it from the dataset itself.

it doesn't state that the data is in a database anywhere in the question - the answer is therefore D

The question says that "sales managers" have access to reports. So adding group of users (AD) to particular role makes more sense than adding each user to particular role. Will go for C

The question says nothing about AD groups. The answer must be D

I was thinking about B, but it's C. and this is why: ------------------------------------------- 1- in the question the say " You assign the relevant distribution lists to each role " and in power BI desktop you can't create or modify distribution list, so it's can be done in Office 365 or Active directory ( or Azure AD) ---------------------------------------------------------------- 2 in the B answer they say """" From Microsoft Power BI Desktop, edit the Row-Level Security setting for the reports. """ ==> if you want to EDIT the Row level security in Power BI, YOU DON'T HAVE ACCESS TO THE LIST OF DISTRIBUTION OF THE SALES MANAGERS. so this answer is wrong ! ---------------------------------------------------------------- ==> So the only correct anwser is C (for me ) (for D I did not analyse it but I know it's not A and B)