Implementing RLS/DRLS in SSAS Tabular vs Power BI ?

[AmiraBedh]

I want to know the difference between implementing RLS or DRLS in SSAS vs Power BI.

If we are implementing it in SSAS tabular should we implement it in the Power BI also ?

We are using an SSAS tabular cube as a datasource for our Power BI report.

[v-zhangti · Accepted solution]

Hi, @AmiraBedh 

1. When using Live Connection mode to connect to SSAS, Manage Roles function in Desktop can not be used, only RLS in SSAS will be used at this time. When using import mode to connect to SSAS, data will be imported from SSAS, but RLS will not be imported, you can manage roles in Desktop.

2. The RLS created in Desktop is a row-level RLS; you need to create roles in Desktop and add members to the roles in Service; you need to view the users of the reports with RLS set in Service as Read-only or Viewer members of the workspace; the RLS set in Desktop constrains the users' access to the table Data access.

The RLS created in SSAS is a role-level RLS; the creation of roles and the addition of role members are done in SSDT or SSMS; the user who sets up the RLS report in Service needs to have Read access in the model; the RLS created on the SSAS model constrains the access to the data of this SSAS instance.

This is the relevant document, hope to help you:

https://docs.microsoft.com/power-bi/admin/service-admin-rls 

https://docs.microsoft.com/power-bi/connect-data/desktop-tutorial-row-level-security-onprem-ssas-tab... 

Best Regards,

Community Support Team _Charlotte

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[amitchandak]

@AmiraBedh , I think in the case of SSAS tabular live correction you need to implement it at the source.

In case of import or direct query, you need to do it on power bi.