Forum Discussion
Data Source setup on Enterprise Gateway
Anonymous wrote:
Hello PowerBIs, I have been give the responsibility of maintaining the On Premise Gateway. Part of the responsibility is adding Data Sources. I am struggling on how to setup database/source connections on the enterprise gateway. Multiple users have dashboards built using the same database with their own level of access.
I thought I have to create one connection for each of the user connecting to the same database with their own credentials.(not possible complaints - Duplicate Data Source )
which leaves me with only option
Create one connection with full read access on the database and let all the dashboards from all users refresh using that one connection.
@This leads to my question - how is the source Database/file security handled? @source? @users level access?
My concern is - will there be any security risk to have Data source connections with 100% access to the source.
Appreciate any suggestions or links that can help.
Thanks
Anonymous
Based on my test, it is not allowed to set up different credentials for one data source in one on-premises gateway. You can either
- Set up multiple on-premises gates and create datasource with different credential in each.
- If not in DirectQuery mode, use Personal gateway and set different credential in indivisual datasets.
As to the security risk to have data source connection with 100% access, I'd agree with Anonymous, "Permission levels should be a concern of the report author." For other aspect, per my personal experience, it should be safe. As the credential is encrypted and Power BI just query the database.
Thanks ENO1978 for the response.
That means the user account that i use to create connection should have access to the full database?
I have users using the sharepoint site, in this case should the account used to create the connection on the gateway should have access to the whole sharepoint site?
Microsoft Employee
Anonymous wrote:
Thanks ENO1978 for the response.
That means the user account that i use to create connection should have access to the full database?
I have users using the sharepoint site, in this case should the account used to create the connection on the gateway should have access to the whole sharepoint site?
I think Anonymous means, for database, as long as the data/content in the report is limited at design time, any credential(viewer or admin) with sufficient access is OK.
As to sharepoint, the report data may vary according to the account, so it all depends on what's in the report and who can see what data.
Thank you for all the inputs. Now I can plan with better understanding.
Appreciate all the help.