Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
8 years ago
Solved

Problems with security when using Live connection to SSAS Tabular

Hi   I'm working with an Oracle DW, SSAS 2016 Tabular models, and PBI for reports, eventually we'll go to PBI Service.   I need to implement security based on AD groups (read access rights) , and...
Need Help
  • v-frfei-msft's avatar
    v-frfei-msft
    8 years ago

    Hi Anonymous,

     

    If you implement RLS on SSAS Tabular, once the report has been published, the dynamic row level security that was defined in the on-premises Analysis Services tabular model has been successfully reflected and observed in the Power BI service. Then Power BI uses the effective username property to send the current Power BI user credential to the on-premises data source to run the queries. So it should work seamlessly without problems.

     

    Regards,

    Frank

v-frfei-msft's avatar
v-frfei-msft
Icon for Community Support rankCommunity Support
8 years ago

Hi Anonymous,

 

Based on my research,  RLS for live connections to Analysis Services are handled in the on-premises model. So you could implement security in the on-premises model. Please refer to the online document.

 

There are some advantages through PBI service.

 

  1. It is more effective to implement RLS in Power BI.
  2. You can do schedule refresh for the report in service.
  3. You can share the content to others in service.
  4. Different users could view the report at one time in service without having to open PBIX file in Power BI Desktop.

Regards,

Frank

Anonymous's avatar
Anonymous
Not applicable
8 years ago

Hi v-frfei-msft,

 

 

you wrote that "It is more effective to implement RLS in Power BI" - but now my doubt is, if i implement RLS on SSAS Tabular, and then move the reports to PBI Service, what will be the one that should be working, or will it work seamlessly without problems?

 

Regards

  • v-frfei-msft's avatar
    v-frfei-msft
    Icon for Community Support rankCommunity Support
    8 years ago

    Hi Anonymous,

     

    If you implement RLS on SSAS Tabular, once the report has been published, the dynamic row level security that was defined in the on-premises Analysis Services tabular model has been successfully reflected and observed in the Power BI service. Then Power BI uses the effective username property to send the current Power BI user credential to the on-premises data source to run the queries. So it should work seamlessly without problems.

     

    Regards,

    Frank

    • Ballamong's avatar
      Ballamong
      New Member
      3 years ago

      I'm finding that the RLS we built on the SSAS model (live connection) is not working in the PBI Service and users are able to see everything. While it should be using the effective user name - it seems to be bypassing the RLS entirely. The users are set up as viewers only - so it's not an admin issue.  Looking for insights on what we are missing