How to authenticate against the cube with the service account?

[Anonymous]

I have all my data residing in an on-premises SSAS server. So I have my Gateway in place.

In the cube, I have manually added the access for the people that use the reports.

Now, I am trying to prevent the users from accessing the cubes from Excel.

My question is: if in the GATEWAY, I switch the option from EffectiveUserName to CustomData…

Then the domain\user won’t be passed… Then I wonder… If in the cube “access settings”; I add the service account account I entered in the ‘Gateway data source settings’ ; in order to authenticate against the cube with the service account; so all other users are prevented from accessing the data from Excel…

Will it mean that any user accessing will not pass domain\user  but instead use the service account, and in that way I would prevent people accessing from excel?

[Anonymous]

Hi, @Anonymous 

Based on my understanding, I believe your assumption is correct. As long as the roles are not set as accessible in the data source settings, other roles should indeed be unable to access the data source, as you mentioned.

Below is a screenshot from the documentation on setting relevant roles:

For detailed information, you can refer to the following link:

Configuring permissions for SSAS (mssqltips.com)
 

I have found some related links that I hope will be helpful to you:

Solved: Re: Row Level Security SSAS - EffectiveUsername or... - Microsoft Fabric Community

Of course, if you have any new ideas, you are welcome to contact us.
 

Best Regards,

Leroy Lu

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.