Forum Discussion
Error message when using Direct Query
Hi hdemedici100 ,
You could explor the possibility of setting up a service principal or a dedicated gateway with specific credentials that can access the underlying data but does not expose it to the end users. This setup would allow automatic data refresh while maintaining the security and restrictions needed.
Best regards,
Lucy Chen
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Super UserHey hdemedici100 ,
Users need access rights to the underlying semantic model. I recommend that you create an Entra ID group, add all semantic model users to it, and give this group read permission ("mange permissions").
Do not forget that providing read permissions to the semantic model differs entirely from configuring RLS.
Permission determines who has access, and RLS determines what data can be seen by those users.
Regards,
Tom
Hi TomMartens,
When you say underlaying semantic model, I'm assuming you're referring to the 'Microsoft 365 Usage Reports' in my case? Is there no way for me to use a different set of credentials in Power BI Service?
I don't want to the consumers of this report to have access to the 'Microsoft 365 Usage Reports', just the two semantic models and reportd I've created. Partly because I'm using RLS, and partly because I've created the relevant visuals which the report consumers would need to see.
Do you (or anyone) know if there is any way around this? I'd like to avoid using import in this circumstanece as I need the data to be refreshed automatically on a regular basis.
