Forum Discussion

rasta123's avatar
rasta123
Frequent Visitor
9 years ago

RLS with Power BI Embedded Premium Question?

We are working with Power BI Premium Embedded and want to implement RLS based on Roles, this was available in previous Power BI Embeded service on Azure following the below documentation:   https:/...
Need Help
Anonymous's avatar
Anonymous
Not applicable
8 years ago

Hi nimrod,

 

We're currently trying to implement RLS with Embedded and SSAS but encountered the issue stated above.

 

While your post gave me hope to be able to go forward, the documentation says the following about the effective identity passed to the GenerateTokenRequest method:

 

From https://powerbi.microsoft.com/en-us/documentation/powerbi-developer-embedded-rls: "The effective identity that is provided for the username property must be a windows user with permissions on the Analysis Services server."

 

var generateTokenRequestParameters = new GenerateTokenRequest("View", null, identities: new List<EffectiveIdentity> { new EffectiveIdentity(username: "username", roles: new List<string> { "roleA", "roleB" }, datasets: new List<string> { "datasetId" }) });

 

So the "username" value should match a Windows user with access on SSAS ?

 

This would lead me to believe that the "app own data" scenario isn't supported with Embedded and SSAS using RLS.

 

Is it a correct assumption ? If so, is it only temporary ?

 

Not having this feature will unfortunately bring our Embedded development to a full halt.

 

Kind regards,

    • Anonymous's avatar
      Anonymous
      Not applicable
      8 years ago

      Hi,

       

      I wasn't aware of the CUSTOMDATA function, which seems to be very interesting for non Windows users indeed.

       

      Altough it didn't help with the RLS implementation we chosed up until now : passing a filter key as the user identity and a filter id as role, and managing the roles at report level.

       

      We now make the distinction between reports using SSAS and other ones and adapt ou RLS accordingly.

       

      The specific issue faced regarding the RLS and SSAS was solved by multiplying SSAS roles :-)

       

      Kind regards,