Forum Discussion

zshane15's avatar
zshane15
Copper Contributor
Sep 21, 2020

Azure SQL - Row Level Security (RLS) Using O365 Groups

Is it possible to set Row Level Security using O365 Groups in an Azure SQL database table?

I have a task table with an "Assigned To" (assignedTo) column (varchar - 255). It stores the email address of an employee OR o365 Group. I need to use that value to set Row Level Security for the row.

1 Reply

  • Command0r's avatar
    Command0r
    Iron Contributor

    zshane15 , O365 works with Azure Active Directory, so, why not?

    At first, you need to connect your Azure SQL Server instance to AAD following this topic: https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell 

    Creating a dynamic group in AAD would be a good idea: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-create-rule

    Once done, one or more users (or a group) as a member to custom or builtin database roles with the specific permissions appropriate to that group of users. Implement your RLS.