Forum Discussion

rubensalvador's avatar
rubensalvador
Icon for Advocate I rankAdvocate I
8 years ago

Ability to fetch SAP BW data respecting user's authorization

Hi all,   we're trying to conclude if we can avoid building up Row Level Security when using IMPORT or DIRECTQUERY connection type to SAP BW. So our current scenario is testing the SSO capabilities...
Need Help
aamikkelsen's avatar
aamikkelsen
New Member
8 years ago

We're facing the same issue, but haven't tried to use Kerberos which was my plan to test. So just to be clear; it isn't possible to create a setup where a Power BI gateway connects to a SAP BW system and passes the AD credentials from the Power BI service down to the database execution layer and thereby filters the data to only contain the rows that she/he is authorize to see based on the BW authorization system?

rubensalvador's avatar
rubensalvador
Icon for Advocate I rankAdvocate I
8 years ago

Hi aamikkelsen,

no, not according to my tests.

 

Whatever scenario I use, IMPORT or DIRECT QUERY, Gateway user rows are allways retrieved and unfortunately not the user rows that I've share the report with. Microsoft restates the need to recreate roles by using the Row Level Security.

 

We're trying to explore other possibilities such as Azure Analysis Services, but that will bring a huge cost for us definitely.

 

br

Rúben

  • Anonymous's avatar
    Anonymous
    Not applicable
    7 years ago

    Hey there rubensalvador!

    I just stumbled upon your post, and I wonder if it's still the case that SSO can't be used to authenticate the end user when using direct query? Or did you manage to get it working?