Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
8 years ago
Solved

Analysis Services (Jet Reports OLAP) + Role management

Hi :)   I've installed the Enterprise Gateway and I can refresh from app.powerbi.com. I've managed the role and permissions from the JetDataManager (Olap Cubes) and when I execute PowerBI Desktop ...
  • Anonymous's avatar
    Anonymous
    8 years ago

    v-jiascu-msft

     

    Hi Dale,

     

    Thanks again for your replies. 

     

    I tried several things, but I think my final solution is to rename the Source in PowerBI Desktop.

     

    Both sources (Desktop / Gateway) were on the same serveur / database, but one was named "Cubes Olap" and the other "Olap".

     

    It works now. Thanks again.

     

    Best regards,

    Matt

v-jiascu-msft's avatar
v-jiascu-msft
Icon for Microsoft Employee rankMicrosoft Employee
8 years ago

Anonymous,

 

Hi Matthieu,

 

It seems that your server allowed the access that was unauthorized. So you should restrict it from the server side. 

If you only want to restrict the access of a Power BI dataset, you can try RLS. Reference: powerbi-admin-rls.

 

Best Regards!

Dale

  • Anonymous's avatar
    Anonymous
    Not applicable
    8 years ago

    v-jiascu-msft

     

    Hi Dale,

     

    Thanks for your reply but :

    • I have restricted from server side because it's working if the user use the Desktop app. 
    • RLS couldn't work because of Analysis Services.

    It's about the online access, I don't understand why the rights are working in local but not online, with the same user which has a valid UPN.

     

    Thanks in advance

     

    Best regards,

    Matthieu

  • Anonymous's avatar
    Anonymous
    Not applicable
    8 years ago

    v-jiascu-msft

     

    Hi Dale,

     

    I do a little schema to explain my problem:

     

     

     

     

     

     

     

     

     

     

     

     

     

     

     

    My Enterprise Gateway is configured with User 1.

     

    I tried to map : 

    [email protected] to [email protected]

    and I tried again [email protected] to company\user2

     

    But my Gateway works with my AD Configuration, the email is in the AD card and I don't have to map for the USER 1, so I think I have not to map username. 

     

    Thanks in advance

     

    Best regards,

    Matthieu

    • v-jiascu-msft's avatar
      v-jiascu-msft
      Icon for Microsoft Employee rankMicrosoft Employee
      8 years ago

      Anonymous,

       

      Hi Matthieu,

       

      I thought it was a Service from a party outside of Microsoft. Let's talk about some simple explanations first.

      >>>The email address, that you sign into Power BI with, is what we will pass to Analysis Services as the effective user. 

      1. If your SSAS server is in a domain company.local, you could grant access to [email protected], [email protected].

      2. If you log in Power BI Service with the same address like [email protected], you don't need to map users.

      3. If you log in PBI Service with user1@company.com, you need to map users.  And you need to map a user to a proper user in order to get the proper access.

       

       

       

       

       

       

       

       

       

       

       

       

       

       

      Question: 1. Can you make it more clear what the type of connection is? Live or import?

      2. How did you map the users?

       

      Reference: https://powerbi.microsoft.com/en-us/documentation/powerbi-gateway-enterprise-manage-ssas/#map-user-names

       

      Best Regards!

      Dale

      • Anonymous's avatar
        Anonymous
        Not applicable
        8 years ago

        v-jiascu-msft

         

        Hi Dale,

         

        Thanks for your reply and sorry for the delay, I was at clients this week. 

        Question 1 : connection live or import

        It's an import connection, but I tried with both, a report with live, a report with import, and I shared it to my test account with configured rights. 

        Same in both cases, I can see everything with this account.

         

        Question 2 : users "mapping"

        I have a local user which has the complete email as upn : [email protected]

        But.. in doubt I tried to map from PowerBI gateway online tool :

        [email protected] to company\user1

        And i tried too

        [email protected] to [email protected]

        And too 

        User 1 to  [email protected] and company\user1

         

        Still "nothing" because I can see everything.. 

         

        Thanks in advance for ur help.

         

        Best regards,

        Matt