Forum Discussion
Community Championon-premises gateway authentication
There seems to be some confusion (with frowny faces) from our IT depart around this
'Authentication to on-premises data sources
A stored credential will be used to connect to on-premises data sources from the gateway except Analysis Services. Regardless of the individual user, the gateway uses the stored credential to connect.'
For data sources outside of analysis services its seems crazy that anyone can connect to any available data source regardless of their user permissions? I am sure I am missing some sort of data source set up here. Or some other place where these permissions need to be defined per model etc. We have not actually set up the gateway yet as IT are in the process of approving the Power BI service, so essentially this information is to motivate for approval.
Maybe i dont understand this correctly?
vanessafvg Yes it is true that stored credential will be used by the report to connect to data source except analysis services regardless of who is accessing the report but you have control over who the report / dashboard is shared with. Also you have option of implemeting row-level security in your data model and that will allow you to control over what level and amount of data is seen by which user of the report. Find out more about RLS here and using UPN function of DAX within RLS you can identify logged in user accessing the report and then pre-define what level of data that user can access.
2 Replies
- ankitpatira
vanessafvg Yes it is true that stored credential will be used by the report to connect to data source except analysis services regardless of who is accessing the report but you have control over who the report / dashboard is shared with. Also you have option of implemeting row-level security in your data model and that will allow you to control over what level and amount of data is seen by which user of the report. Find out more about RLS here and using UPN function of DAX within RLS you can identify logged in user accessing the report and then pre-define what level of data that user can access.
v-haibl-msftMicrosoft Employee
As ankitpatira said, if you don’t share the dashboard, other ones cannot see the data. You can also manage users who can publish reports that use the data source configured in on-premises gateway.
Best Regards,
Herbert