Register now to learn Fabric in free live sessions led by the best Microsoft experts. From Apr 16 to May 9, in English and Spanish.
May some one help me understand how row level security that has been implemented at SSAS tabular model level work with power BI reports published to the power BI service when the reports are using import connection method (NOT live connection).
I'm at the start of a project that is going to use SSAS tabular model and one of the requirements is that row level security is a must.
If i want to do things right from the beginning, is it ok to just implement row level security at the SSAS cube, then use any power bi connection method (live or import) and everything will play nice when i publish and share my reports, datasets and dashboards in the service.
My goal is to get this right early before time and resources are wasted but searches can't seem to find any official clear direction about this.
Solved! Go to Solution.
Hi, @kadingo
If your data source already has security roles defined and you are using import data into your Power BI dataset, the security roles in your data source aren't used. In this case, you should define RLS to enforce security rules for users who connect in Power BI. And in the Import mode, the data source content is cached into the desktop, so it has nothing to do with the original source. Unlike DQ and LC, it is also equivalent to real time.
Best Regards
Allan
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Hi, @kadingo
If you import data from SSAS into Power BI Desktop, you can define roles and rules in Power BI Desktop and then validate the role within Power BI Service. If you are using a live connection to SSAS, you won't be able to configure RLS within Power BI Service. It is defined within the SSAS model on-premises.
For further information, you may refer to the following links.
https://docs.microsoft.com/en-us/power-bi/desktop-tutorial-row-level-security-onprem-ssas-tabular
https://docs.microsoft.com/en-us/power-bi/service-admin-rls
Best Regards
Allan
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
@v-alq-msft You mention that
@v-alq-msft wrote:Hi, @kadingo
If you import data from SSAS into Power BI Desktop, you can define roles and rules in Power BI Desktop and then validate the role within Power BI Service. If you are using a live connection to SSAS, you won't be able to configure RLS within Power BI Service. It is defined within the SSAS model on-premises.
For further information, you may refer to the following links.
https://docs.microsoft.com/en-us/power-bi/desktop-tutorial-row-level-security-onprem-ssas-tabular
https://docs.microsoft.com/en-us/power-bi/service-admin-rls
Best Regards
Allan
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Does this mean i can not take advantage of RLS defined within the SSAS model on-premises if i import data from SSAS into Power BI Desktop?.
I have existing reports using import method and i plan to define RLS within my SSAS model on-premises, can those existing reports take advantage of RLS that is going to be defined within my SSAS model on-premises OR i will have to redesign those reports using live connection to be able to take advantage of RLS defined at the model.
The important think to note here is that i have existing reports that are using import method and RLS will be defined within my SSAS model on-premises. Will my reports be able to use that RLS or i will have to redesign them using live connection?
Hi, @kadingo
If your data source already has security roles defined and you are using import data into your Power BI dataset, the security roles in your data source aren't used. In this case, you should define RLS to enforce security rules for users who connect in Power BI. And in the Import mode, the data source content is cached into the desktop, so it has nothing to do with the original source. Unlike DQ and LC, it is also equivalent to real time.
Best Regards
Allan
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Hi @kadingo ,
if you imported the data into Power BI, you configure RLS with Power BI Desktop.
If you use a live connection, you configure RLS on the on-premises model.
https://docs.microsoft.com/en-us/power-bi/service-admin-rls
@mwegener So its correct to take it that RLS implemented on the SSAS on-premises model does not work when one is using import connection method in Power BI desktop, right?. If i want RLS in the power BI service and i have implemented it at the SSAS on-premises model, then i MUST buld my reports in power bi desktop using live connection only NOT import, correct?
Covering the world! 9:00-10:30 AM Sydney, 4:00-5:30 PM CET (Paris/Berlin), 7:00-8:30 PM Mexico City
Check out the April 2024 Power BI update to learn about new features.
User | Count |
---|---|
97 | |
96 | |
81 | |
74 | |
66 |
User | Count |
---|---|
129 | |
106 | |
106 | |
86 | |
72 |