Forum Discussion

tessahurr's avatar
tessahurr
Icon for Microsoft Employee rankMicrosoft Employee
5 years ago

Share your thoughts on DirectQuery for Power BI datasets and Azure Analysis Services (preview)

Hit Reply and let us know what you think of the DirectQuery for Power BI datasets and Azure Analysis Services.  To learn more about this feature, please visit this blog post or our documentation.   ...
General Comment
Anonymous's avatar
Anonymous
Not applicable
5 years ago

After a lot of trial and error, I realized what exactly was the reason for some users not being able to see the report with the composite model. Turns out that only the users for whom "Allow XMLA endpoints and Analyze in Excel with on-premises datasets" is enabled, can see the full report without problems. Others get an error. ("Cant display this visual")

 
This is a problem for my organization because I can't grant this right to all users and makes the feature completely useless for us.  Very sad because we were very excited about the opportunity.
jeroenterheerdt's avatar
jeroenterheerdt
Icon for Microsoft Employee rankMicrosoft Employee
5 years ago

I am sorry to hear that, but it's clearly listed on the blog and docs that you need to enable XMLA / Analyze in Excel. This feature depends on it and cannot work without it.

  • Anonymous's avatar
    Anonymous
    Not applicable
    5 years ago

    I understand. Just surprised and sad that it is also needed for the viewers... Makes it unusable in our case...

     

    Our situation is as follows: we have a big dataset with all the data and all the reports are based on it. Some people are only allowed to see volume columns, others can also see columns with actual $ values. It is our understanding that we cant use RLS or similar to hide the $ columns from people who are not supposed to see them  (Spinning them into another dataset is not an option). If we give everyone in the organization the XMLA / Analyze in Excel option, the people who have access to some reports will be able to access also all the columns in that case, which is not acceptable... Are we thinking correctly? Thanks!

    • jeroenterheerdt's avatar
      jeroenterheerdt
      Icon for Microsoft Employee rankMicrosoft Employee
      5 years ago

      why cant you use RLS? can you not set RLS on the composite model?

      • Anonymous's avatar
        Anonymous
        Not applicable
        5 years ago

        Because we would need column-level security. We do have row-level security set up. Basically, think of the data like this:

        RegionVolumeProfit
        Region 11112
        Region 22122

         

        We have RLS set up sp that a user can only see data from Region 1. But we also need to be able to say that within that region the user can only see the column Volume, but not the column Profit.

        Its ok if we only expose the Volume column in the report they are allowed to see. But once we give everyone access to Analyze in Excel, they will be able to see all the columns (indeed, only for their region but also the columns they arent supposed to see).

         

        Right?