Forum Discussion

rasta123's avatar
rasta123
Frequent Visitor
9 years ago

RLS with Power BI Embedded Premium Question?

We are working with Power BI Premium Embedded and want to implement RLS based on Roles, this was available in previous Power BI Embeded service on Azure following the below documentation:   https:/...
Need Help
yuryb's avatar
yuryb
Power BI Team
9 years ago

Yes, currently this is not supported but we're working to enable RLS for the new embedding API. First this will be supported for reports based on Power BI models (not AS on-prem or AS Azure live connections). The RLS roles and username will be passed as additional parameters to GenerateToken API. The current plan is to make this available in August.

 

Best regards

fbeekvel's avatar
fbeekvel
Frequent Visitor
9 years ago

Hi yuryb

 

Do you have any idea (rough ballpark) when RLS will be available for live Azure AS connections?

  • avive's avatar
    avive
    Power BI Team
    9 years ago

    Hi,

    We do not have a date to share yet for PBI Embedded with RLS connecting to AS Azure

    • rasta123's avatar
      rasta123
      Frequent Visitor
      9 years ago

      Aviv, thanks for update.

       

      We have re-developed a new multi-tenant PaaS application on Azure & Azure SQL and the last enhancement we want to make is the embedding of Power BI & Report Visuals.  We have everything hooked up with the new API's and everything seemed to work great.  We have temporarily hard-coded some TenantID column filters into our models, but the last piece of the puzzle was to implement tenant security within our Power BI Models so we don't have to build seperate models for each Tenant.  We are planning on utilizing role based security within our models and passing the tenant ID within the API in order to filter using these roles the data based on that TenantID column. Can we assume this is the best approach and anticipate the Microsoft is going to support this approach fairly soon within Power BI Models and the new API's?  This would allow us to setup a single user account in Azure AD to support each Tenant and connect to his role.  Does that make sense, I am not the developer, but working with him to map out final pieces of the puzzle.

       

    • berhir's avatar
      berhir
      Regular Visitor
      9 years ago

      Hi yuryb and avive,

       

      I am currently working on a very similar scenario as rasta123.

      We have a multi-tenant web app and want to provide a single report that shows only the data for the current tenant.

      The data is stored in a Sql Azure DB and we use direct query to get the data into the report.

      We have already embedded the report and everything works fine so far.

      The only missing piece to make it available to our customers is RLS.

       

      yuryb said there will be an update in August that brings RLS to the new API. Is my scenario possible with this update? And do you already have a date?

       

      Thanks!

    • Anonymous's avatar
      Anonymous
      Not applicable
      8 years ago

      Hi,

       

      Do you have any idea when RLS will be available for live on premise SSAS connections?

       

      We have a proof of concept (app owns data) that depends on this, and are stuck at the moment.

       

      Kind regards,