How can I set it up so that each user updates from the Database with their own username & password?

[mikaelhelmers]

We have created Power Bi reports in a shared workspace. These reports are connected with our Snowflake database. We get new data into the database daily, sometimes even more often. Mainly due to this, but also other reasons, it would be suitable if each and every user of the Report can update the underlying data from the Snowflake database whenever they want to. But however we arrange it we cannot find a solution that prompts each user for their own username & password. We can create the report with, for example my credentials but then all other users will be updating the report using my credentials. This could work for us at the moment but in a couple of months Snowflake (the databse provider) will demand MFA (multi factor authentication) when connecting with the database. And in that scenarion I would have to approve every new update from a mobile app. If we could make it so that every user gets prompted for their own credentials they would approve their own logins in their own mobile app. Other positive effects of not sharing the same login would be to be able to filter the data depending on user. Is this not possibel to fix? We would be very grateful for any input regarding this. Thanks beforehand.

[v-veshwara-msft]

Hi @mikaelhelmers ,

Just following up on your issue to see if you’ve found a solution. If so, please mark the helpful reply as the Accepted Solution to assist others with similar issues. If you still need help, feel free to reach out for further assistance.

Best regards,
Vinay

[v-veshwara-msft]

Hi @mikaelhelmers ,
Thanks for reaching out in Microsoft Fabric Community,
As suggested by @andrewsommer the recommended approach from a security and governance perspective is to use a service account instead of individual credentials. The data can be loaded into a staging area on a scheduled refresh, and Row-Level Security (RLS) can be implemented to ensure users only see the data relevant to them.
However, if your requirement is for each user to authenticate with their own credentials, Power BI supports Single Sign-On (SSO) with Snowflake in DirectQuery mode. This allows users to connect using their own credentials, ensuring MFA compliance and personalized access. You can refer to Microsoft's guide on enabling this: Connect to Snowflake with Power BI - Power BI | Microsoft Learn

Hope this helps. Please reach out for further assistance.

Please consider marking the helpful response as "Accepted Solution" to assist others with similar queries.

Thank you.

[andrewsommer · Accepted solution]

What you are describing is generally the opposite of how you would approach this from a security and governance perspective. 

Typically, you want the data source set up on a resource account and not an individual. You would then load in all the data into a bronze staging area on whatever refresh schedule you need.  After that you would set up row level security to only show the data that the user needs.

With all of that said, Microsoft does have the ability to pass end user credentials to snowflake.  You can use this article to learn about enabling the functionality and setting it up. 

Connect to Snowflake with Power BI - Power BI | Microsoft Learn