Forum Discussion
RLS with Power BI Embedded Premium Question?
Yes, currently this is not supported but we're working to enable RLS for the new embedding API. First this will be supported for reports based on Power BI models (not AS on-prem or AS Azure live connections). The RLS roles and username will be passed as additional parameters to GenerateToken API. The current plan is to make this available in August.
Best regards
- fbeekvel9 years agoFrequent Visitor
Hi yuryb
Do you have any idea (rough ballpark) when RLS will be available for live Azure AS connections?
- avive9 years agoPower BI Team
Hi,
We do not have a date to share yet for PBI Embedded with RLS connecting to AS Azure
- rasta1239 years agoFrequent Visitor
Aviv, thanks for update.
We have re-developed a new multi-tenant PaaS application on Azure & Azure SQL and the last enhancement we want to make is the embedding of Power BI & Report Visuals. We have everything hooked up with the new API's and everything seemed to work great. We have temporarily hard-coded some TenantID column filters into our models, but the last piece of the puzzle was to implement tenant security within our Power BI Models so we don't have to build seperate models for each Tenant. We are planning on utilizing role based security within our models and passing the tenant ID within the API in order to filter using these roles the data based on that TenantID column. Can we assume this is the best approach and anticipate the Microsoft is going to support this approach fairly soon within Power BI Models and the new API's? This would allow us to setup a single user account in Azure AD to support each Tenant and connect to his role. Does that make sense, I am not the developer, but working with him to map out final pieces of the puzzle.
- Eric_Zhang9 years agoMicrosoft Employee
yuryb wrote:
Yes, currently this is not supported but we're working to enable RLS for the new embedding API. First this will be supported for reports based on Power BI models (not AS on-prem or AS Azure live connections). The RLS roles and username will be passed as additional parameters to GenerateToken API. The current plan is to make this available in August.
Best regards
Thanks for the confirmation. By the way, are you from the product team?
- yuryb9 years agoPower BI Team
Yes. Looking how to reflect this in my signature