how to implement RLS in SSAS

[pragyamishra]

Hi All,

Can someone please tell me if I can implement Dynamic Row level Security in SSAS if my users have not joined a domain and my report server is also not on any domain?

Thanks,

Pragya Mishra

[muchinski]

Hi, no, you can't.

For Row Level Security, you rely on Windows Authentication. This is what allow you to use the USERNAME() function to dinamically filter the data on Roles.

[pragyamishra · Accepted solution]

Hi @muchinski

Got this reply in a SSAS forum.

If you are not on a domain you will have to create local users on the server machine that is running SSAS with the identical username and password that your users use to logon to their client machines. Then you can put those local accounts from the server into roles in SSAS. When you are on a workgroup the user tokens get created by securely hashing the username and password so as long as these are identical the workgroup will map the client accounts to the server account. This also means that any time a user changes their local password you will also need to change the password for the account on the SSAS server.

So, I believe I should be able to do it. I shall test it soon enough. 🙂