Join us at FabCon Atlanta from March 16 - 20, 2026, for the ultimate Fabric, Power BI, AI and SQL community-led event. Save $200 with code FABCOMM.
Register now!Join the Fabric FabCon Global Hackathon—running virtually through Nov 3. Open to all skill levels. $10,000 in prizes! Register now.
How does the security layer work for Published Apps? I assume it's pretty straight forward for Import and non-SSAS. Does the effective username still hold true for Published Apps when the datasource is SSAS and method is Live Connection? For DirectQuery, are the credentials of the Dataset still used to update the Published App's data?
Thanks,
Ward
The effective user name still seems to hold. I was experimenting with a live SSAS connnection, had a published app that only mapped one user but not another in the gateway setup. When the non-mapped user access the App, the report says it cannot connect to the data source, which is live SSAS through gateway. Once mapped the report functions again.
Have not tried DirectQuery but would expect it to be the same.
@wmorris20 I can't find any documentation yet, but since apps are read only we should be able to assume that RLS in it's current form will work. Especially, as sharing apps is the only means for sharing using the Premium license.