Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

The ultimate Microsoft Fabric, Power BI, Azure AI & SQL learning event! Join us in Las Vegas from March 26-28, 2024. Use code MSCUST for a $100 discount. Register Now

Reply
hereri
Frequent Visitor

Problems with security when using Live connection to SSAS Tabular

For one of our customers we have implemented row based security in SSAS Tabular using roles, and then adding members to these roles. When connecting to SSAS Tabular from Power BI the set filters are not having any effect.

 

After doing some digging with SQL Server Profiler (connected to SSAS) I see that<EffectiveUserName> is set to the service account being used to connect to Tabular (same as Logged In User), *NOT* the UPN of the logged in user. This information is returned in the <CustomData> tag. I have a feeling that this might be related. We are using "On-Premise data gateway" for this customer.

 

As as side-note, another customer of ours also have row based security (which works), and here the logged in users UPN is returned in the <EffectiveUserName> tag. The major difference is that this customer is still on "Power BI Gateway - Enterprise".

 

Any clues or hints towards a solution?

1 ACCEPTED SOLUTION
v-qiuyu-msft
Community Support
Community Support

Hi @hereri,

 

In your scenario, did your Power BI service login names match your local directory UPN on SSAS side? If not, please check if you set the Mapping User Roles in on-premise data gateway. For more information, see: Map user names.

 

Also verify the user is not the admin on the server, please refer to AlexeyRusinov's reply in this thread: Enterprise Gateway with Analysis Services not passing logged in users credentials .

 

If issue persists, please share the detail steps about how you set row level security and the on-premise data gateway version for our analysis.

 

Best Regards,
Qiuyun Yu

 

 

 

Community Support Team _ Qiuyun Yu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

2 REPLIES 2
v-qiuyu-msft
Community Support
Community Support

Hi @hereri,

 

In your scenario, did your Power BI service login names match your local directory UPN on SSAS side? If not, please check if you set the Mapping User Roles in on-premise data gateway. For more information, see: Map user names.

 

Also verify the user is not the admin on the server, please refer to AlexeyRusinov's reply in this thread: Enterprise Gateway with Analysis Services not passing logged in users credentials .

 

If issue persists, please share the detail steps about how you set row level security and the on-premise data gateway version for our analysis.

 

Best Regards,
Qiuyun Yu

 

 

 

Community Support Team _ Qiuyun Yu
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Hi @v-qiuyu-msft

 

Thank you for your reply. I did find the answer to my problem. In the map user functionality you can decide if you want to use EffectiveUserName or CustomData. Since my browser was in Norwegian the translated text completely threw me off and I did not see the relevance between that option, and how Power BI pushed UPN to SSAS. 

 

Thanks alot for your help 🙂

Helpful resources

Announcements
Fabric Community Conference

Microsoft Fabric Community Conference

Join us at our first-ever Microsoft Fabric Community Conference, March 26-28, 2024 in Las Vegas with 100+ sessions by community experts and Microsoft engineering.

February 2024 Update Carousel

Power BI Monthly Update - February 2024

Check out the February 2024 Power BI update to learn about new features.

Fabric Career Hub

Microsoft Fabric Career Hub

Explore career paths and learn resources in Fabric.

Fabric Partner Community

Microsoft Fabric Partner Community

Engage with the Fabric engineering team, hear of product updates, business opportunities, and resources in the Fabric Partner Community.

Top Solution Authors
Top Kudoed Authors