Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
10 years ago

Office365 users integration with SSAS Tabular for security

Hi all,

 

My client users are currently on Office365 subscription. We are implementing a PowerBI solution for them. They do not have any Active Directory server to store their credentials.

 

Now there's a gap on the security. We need to setup the security matrix to define who can and cannot see what kind of content in the tabular data model. Basically, a role based security. 

 

Anyone has any idea or suggestion on how we can implement this?

 

Thanks and much appreciated.

Need Help

8 Replies

  • Bjoern's avatar
    Bjoern
    Continued Contributor
    10 years ago

    Anonymous

    The role-based security has to be activated in the backend (in the source itself) and the users would have to use the database authorization instead of the windows authentication, if I am not mistaken.

     

    This seems hard to replicate, as in Power BI you are using personal accounts tied to your personal mailadress/id within the organisation.

     

    How do they use PowerBI right now, if they do not have an Active Directory? :catsurprised:

    • Anonymous's avatar
      Anonymous
      Not applicable
      10 years ago
      Bjoern
      Hi, thanks for the reply.

      They are using their own organization O365 account as the login to PowerBI. They are integrated right?

      I don't understand the part "role based security has to be activated in the back end". U mean Azure SQL DB or SSAS Tabular?

      Btw, their data source is Azure SQL DB. We extract and load data into PowerBI/PowerPivot data model.
      • Bjoern's avatar
        Bjoern
        Continued Contributor
        10 years ago

        Anonymous

         

        I have not tested the integration of O365 and the AD itself, but usually, if you subscribe with the same mailadress, i would assume that their is some kind of integration. Have you tried to search for the users when enabling the row-level security? How do you logon to your servers? With the localhost\xxx users? :o

         

        Regarding Azure Sequel DB / Backend Security: You have to enable the row-level based security in the SQL DB itself. Power BI does not (as far as I know) offer any additional security layer for the database. The user authenticates with his O365-account towards Power BI and then authenticates against the source.

         

        One remark from my side: If you talk about SSAS Tabular I would assume that you use the SSAS Tabular Server (via live connect) and not an integration of Azure SQL DB (live connect / data import), as you had written. For both Row-level based security should be possible.

         

        Sorry that I can not confirm your approach, but my knowledge of O365<>AD is limited.