Forum Discussion

opensky's avatar
opensky
Regular Visitor
8 years ago

Unable to get RLS security to work with an “app owns data” embedded PBI using Azure Analysis Service

Hello,   I am looking for some help getting RLS to work with embedded Power BI and AAS. Here is the scenario:   Deploying as App-owns-data RLS setup with roles in AAS (RLS not configured in PBI...
opensky's avatar
opensky
Regular Visitor
8 years ago

Thank you for the response Dale. I did review that documentation before posting to this forum but have not been able to figure out what I am doing wrong.

 

I've seen conflicting messages in posts and in the MSFT documentation, can you confirm:

 

1. Are roles supported in Azure Analysis Services when using PBI embed tokens? (RLS not defined in PBI)

2. Is CustomData supported in Azure Analysis Services when using PBI embed tokens?

 

Thanks!

v-jiascu-msft's avatar
v-jiascu-msft
Microsoft Employee
8 years ago

Hi opensky,

 

The documentation is quite clear.

1. Please refer to developer/embedded-row-level-security#considerations-and-limitations.

>>>Azure Analysis Services live connections support filtering by roles, but not dynamic by username. Dynamic filtering can be done using CustomData.

2. Please refer to the blue Note in embedded-row-level-security#working-with-analysis-services-live-connections.

>>>The CustomData feature will only work for models that reside in Azure Analysis Services, and it only works in live mode. Unlike users and roles, the custom data feature can't be set inside a .pbix file. When generating a token with the custom data feature you must a have user name.

 

Best Regards,

Dale