sean_cochran's avatar
sean_cochran
Icon for Resolver I rankResolver I
6 days ago
Status:
New

executeDaxQueries-like API call with effectiveUserName on SSO-enabled model with Service Principal

Please provide a way for a service principal to execute DAX - with an effective user name - against an SSO-enabled directlake semantic model and get per-user results that respect lakehouse OneLake Security data access role restrictions (RLS, CLS).

This should not require granting every effective user access to the execute queries API endpoint, which creates security and governance issues.

1 Comment

  • OneLake Security still seems half-baked, but this would open up lots of possiblities if Microsoft allows effective user name calls against an SSO-enabled DirectLake on OneLake semantic model.

Recent ideas