Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
8 years ago
Solved

Analysis Services (Jet Reports OLAP) + Role management

Hi :)

 

I've installed the Enterprise Gateway and I can refresh from app.powerbi.com.

I've managed the role and permissions from the JetDataManager (Olap Cubes) and when I execute PowerBI Desktop with a user who doesn't have all the access, everything it's working.

 

But when I publish the report, this same user has all permissions :/

 

In my AD,  my local user @domain.local has @domain.com (same UPN)

 

What should I do ?

 

Thanks in advance

 

Best regards,

Matthieu

  • Anonymous's avatar
    Anonymous
    8 years ago

    v-jiascu-msft

     

    Hi Dale,

     

    Thanks again for your replies. 

     

    I tried several things, but I think my final solution is to rename the Source in PowerBI Desktop.

     

    Both sources (Desktop / Gateway) were on the same serveur / database, but one was named "Cubes Olap" and the other "Olap".

     

    It works now. Thanks again.

     

    Best regards,

    Matt

7 Replies

  • v-jiascu-msft's avatar
    v-jiascu-msft
    Icon for Microsoft Employee rankMicrosoft Employee
    8 years ago

    Anonymous,

     

    Hi Matthieu,

     

    It seems that your server allowed the access that was unauthorized. So you should restrict it from the server side. 

    If you only want to restrict the access of a Power BI dataset, you can try RLS. Reference: powerbi-admin-rls.

     

    Best Regards!

    Dale

    • Anonymous's avatar
      Anonymous
      Not applicable
      8 years ago

      v-jiascu-msft

       

      Hi Dale,

       

      Thanks for your reply but :

      • I have restricted from server side because it's working if the user use the Desktop app. 
      • RLS couldn't work because of Analysis Services.

      It's about the online access, I don't understand why the rights are working in local but not online, with the same user which has a valid UPN.

       

      Thanks in advance

       

      Best regards,

      Matthieu

    • Anonymous's avatar
      Anonymous
      Not applicable
      8 years ago

      v-jiascu-msft

       

      Hi Dale,

       

      I do a little schema to explain my problem:

       

       

       

       

       

       

       

       

       

       

       

       

       

       

       

      My Enterprise Gateway is configured with User 1.

       

      I tried to map : 

      [email protected] to [email protected]

      and I tried again [email protected] to company\user2

       

      But my Gateway works with my AD Configuration, the email is in the AD card and I don't have to map for the USER 1, so I think I have not to map username. 

       

      Thanks in advance

       

      Best regards,

      Matthieu

      • v-jiascu-msft's avatar
        v-jiascu-msft
        Icon for Microsoft Employee rankMicrosoft Employee
        8 years ago

        Anonymous,

         

        Hi Matthieu,

         

        I thought it was a Service from a party outside of Microsoft. Let's talk about some simple explanations first.

        >>>The email address, that you sign into Power BI with, is what we will pass to Analysis Services as the effective user. 

        1. If your SSAS server is in a domain company.local, you could grant access to [email protected], [email protected].

        2. If you log in Power BI Service with the same address like [email protected], you don't need to map users.

        3. If you log in PBI Service with user1@company.com, you need to map users.  And you need to map a user to a proper user in order to get the proper access.

         

         

         

         

         

         

         

         

         

         

         

         

         

         

        Question: 1. Can you make it more clear what the type of connection is? Live or import?

        2. How did you map the users?

         

        Reference: https://powerbi.microsoft.com/en-us/documentation/powerbi-gateway-enterprise-manage-ssas/#map-user-names

         

        Best Regards!

        Dale