Azure Synapse RLS based in Logged in users AZ AD security group he belongs to

Hi,

In Azure synapse dedicated SQl pool I am trying to implement and test row level security using security predicate function and security policy based on logged in users Azure Active directory security group.

  1. Created external Az AD security group as user from extrenal provider
  2. Created roles rls_ad_normal
  3. Added AZ AD security group to DB role created in step2 using sp_addrolemember, so that AZ AD security group is a member of role(s) created in step2
  4. Created security predicate function with logic is_ROLEMEMBER( rls_ad_normal) and @user_entitlement= NORMAL
  5. Created security policy

user_entitlement is a column in data.Table1

But rows are not getting filtered based on logged in users Azure Active directory security group he belongs to.

Both SELECT IS_ROLEMEMBER(‘rls_AD_normal’) As InRole And SELECT IS_MEMBER(‘rls_AD_normal’) returning 0 (Zero)

Does Azure Active directory groups membership of logged in user dosent get resolved in Synapse Dedicated SQL pool?

Thanks,

Read more here: Source link