Security groups are often pointed out as the best way to manage permissions in Power BI, but static security groups just move the hassle from one place to another. Dynamic security groups are a very interesting alternative if users metadata is good and detailed enough. In this session we go through the process of extracting metadata, comparing with a reliable source (HR system or Excel) and design possible groups. We will look also on how to handle guest users too. As a bonus, such security groups can even be an alternative to dynamic RLS in some scenarios. The main benefit is that there's no maintenance if literals in the attributes do no not change. That allows to create as many workspaces as necessary to keep things in order.