Forum Discussion
RLS with Power BI Embedded Premium Question?
Hi yuryb
Do you have any idea (rough ballpark) when RLS will be available for live Azure AS connections?
Hi,
We do not have a date to share yet for PBI Embedded with RLS connecting to AS Azure
Aviv, thanks for update.
We have re-developed a new multi-tenant PaaS application on Azure & Azure SQL and the last enhancement we want to make is the embedding of Power BI & Report Visuals. We have everything hooked up with the new API's and everything seemed to work great. We have temporarily hard-coded some TenantID column filters into our models, but the last piece of the puzzle was to implement tenant security within our Power BI Models so we don't have to build seperate models for each Tenant. We are planning on utilizing role based security within our models and passing the tenant ID within the API in order to filter using these roles the data based on that TenantID column. Can we assume this is the best approach and anticipate the Microsoft is going to support this approach fairly soon within Power BI Models and the new API's? This would allow us to setup a single user account in Azure AD to support each Tenant and connect to his role. Does that make sense, I am not the developer, but working with him to map out final pieces of the puzzle.
I am currently working on a very similar scenario as rasta123.
We have a multi-tenant web app and want to provide a single report that shows only the data for the current tenant.
The data is stored in a Sql Azure DB and we use direct query to get the data into the report.
We have already embedded the report and everything works fine so far.
The only missing piece to make it available to our customers is RLS.
yuryb said there will be an update in August that brings RLS to the new API. Is my scenario possible with this update? And do you already have a date?
Thanks!
RLS is out, read about it here: https://powerbi.microsoft.com/en-us/documentation/powerbi-developer-embedded-rls/
and also about the updates to the GenerateToken API that goes with it: https://msdn.microsoft.com/en-us/library/mt784614.aspx
Hi Avive
Still can't find info on how to generate an embeeded token with Roles for Tiles and Dashboards?
Is there any time line to support this?
Thanks
Nick
Hi,
Do you have any idea when RLS will be available for live on premise SSAS connections?
We have a proof of concept (app owns data) that depends on this, and are stuck at the moment.
Kind regards,
- We have support for Analysis Services live connections now. See more here- https://powerbi.microsoft.com/en-us/documentation/powerbi-developer-embedded-rls/#working-with-analysis-services-live-connections
Hi nimrod,
We're currently trying to implement RLS with Embedded and SSAS but encountered the issue stated above.
While your post gave me hope to be able to go forward, the documentation says the following about the effective identity passed to the GenerateTokenRequest method:
From https://powerbi.microsoft.com/en-us/documentation/powerbi-developer-embedded-rls: "The effective identity that is provided for the username property must be a windows user with permissions on the Analysis Services server."
var generateTokenRequestParameters = new GenerateTokenRequest("View", null, identities: new List<EffectiveIdentity> { new EffectiveIdentity(username: "username", roles: new List<string> { "roleA", "roleB" }, datasets: new List<string> { "datasetId" }) });So the "username" value should match a Windows user with access on SSAS ?
This would lead me to believe that the "app own data" scenario isn't supported with Embedded and SSAS using RLS.
Is it a correct assumption ? If so, is it only temporary ?
Not having this feature will unfortunately bring our Embedded development to a full halt.
Kind regards,
