Forum Discussion
AD authenticaion on local Power BI server (with SQL 2017)
Hi VermontSC,
I'm trying to find how to set up authentication to a local PowerBI report server (allow those in an AD group). It seems all the documentation is focussed on running via Azure and doesn't translate. Because of the type of data we have, we're actually legally obliged to NOT use cloud services, and even if we weren't, I'd want to avoid it.
Based on my research, Power BI report server is a on-premise solution. Except the publisher requires Power BI pro license, other users consume the report doesn't require this. Each user access to report server will be authenticated by Integrated Windows Authentication. You can see Riccardo Muti's comments here: https://ideas.powerbi.com/forums/265200-power-bi-ideas/suggestions/19953286-embed-power-bi-report-server-reports-into-extranet
I would also like the authentication to be just to the server - and once you're in, authentication to the individual databases and datasets is 'hard coded' within the reports (ie. not having to create 150+ SQL accounts for each user). I've seen posts of people complaining about having a login, but again, these are all Azure-based, and don't seem to be relevant to a local BI report server.
Once the report published to report server, we can store credential for data source so end user doesn't need to enter credential again to access data source. See: https://docs.microsoft.com/en-us/sql/reporting-services/report-data/specify-credential-and-connection-information-for-report-data-sources#ways-to-specify-credentials-for-connecting-to-remote-data-sources
Best Regards,
Qiuyun Yu
Hi v-qiuyu-msft,
You post tells me it *can* be done, but not *how*. Note that it's not just allowing access, it's also blocking access for those who should not have access... as stated in my original post, only memebers of a certain AD group can do so.
I am already running a local BI server (as part of SQL Enterprise), and I can configure access to the reports as mentioned in your like, but I cannot find out how to force authentication to the BI server, and therefore allow and block groups of users (or 'public') from the server itself.
Ideally, I'd be able to have different groups access different PBIX, but I'll take yes/no access to the BI server.
Regards,
Hi VermontSC,
The Power BI Report server is a 'superset' of the well known SQL Server Reporting Services. (in a nutshell, it is a SQL Server Reporting Services that also renders Power BI Reports)
All the security documentation can be found under SQL Server Reporting Services at https://docs.microsoft.com/en-us/sql/reporting-services/security/granting-permissions-on-a-native-mode-report-server
Hi VermontSC, I have the same scenario here...Did you solve it?
Hi,
I've actually been tied up with other projects. I haven't tried the security info in the post above, so that may work. From memory, it's a "handball to your DBA" type solution (though I'm also my DBA).
