Forum Discussion
SAP HANA and Row Level Security
Hi mattswindon,
After connecting to SAP HANA database in Power BI Desktop, you can define roles and rules to implement row level security for your dataset, and you will need to add members to defined roles in Service after publishing the Power BI Desktop file.
Moreover, you can take advantage of the DAX function username() within your dataset. You can use it within expressions in Power BI Desktop. When you publish your model, it will be used within the Power BI service. You can take a look at the following article to get more details about row level security in Power BI: https://powerbi.microsoft.com/en-us/documentation/powerbi-admin-rls/.In addition, the article you reviewed is specific to SSAS data source, I am afraid that you are not able to use same technology to map user with SAP HANA.
Thanks,
Lydia Zhang
Thanks Lydia. I'm having to revisit this after a couple of weeks away. Perhaps I' was over complicating things by talking about SAP SESSION_USER!
From what now I understand, the SAP HANA conenction cannot utilise any row level secutiry already implemented in HANA but we can build a seperate secuirty model in Power BI when accessing HANA via Direct Query.
Are there any plans to leverage row level security in HANA the way Power BI works with SSAS? Duplicating row level security thru Power BI Roles is far from ideal if there already is a security model in place in HANA.
I’m getting ready to tackle RLS. I’m curious how far you’ve gotten. I’m crossing my fingers I don’t lose the performance I’ve been enjoying since adopting HANA.
I am also curious to see if anyone had any luck tackling RLS on a PowerBI -> HANA On prem setup
How far did you get? Has anyone tried using a composite model?
https://docs.microsoft.com/en-us/power-bi/desktop-composite-models
Evaluate USERNAME() DAX function to determine current report viewer and add a directquery lookup on a BW authorization table for the objects named in the import query?
Anonymous wrote:I’m getting ready to tackle RLS. I’m curious how far you’ve gotten. I’m crossing my fingers I don’t lose the performance I’ve been enjoying since adopting HANA.
I've conquered dynamic analytic privleges for sap hana - we do not use BW. Dynamic procedure passes the rule for the user viewing the data. We use direct query - the performance is awesome. I couldn't be happier with this as a solution. We need paramters to be accessible from powerbi service but I'm not slowing down for that.
SSO was a little painful to seutp sense the MS support didn't realize their product did not support sso in desktop (saml).
