PBI Report Builder - Paginated Report RLS With Roles Defined at AAS Level

[TelmoBarbosa]

Hi there,

I am looking to migrate my paginated reports (.rdl) currently hosted on a Reporting Services Server to Power BI Service.

My analytical models are hosted on an Azure Analysis Services Server with Row-Level Security (RLS) defined.

In the Reporting Services Server, I can configure the connection to the dataset to be made by the user viewing the report, ensuring that a specific user does not access more data than specified in their role.

This functionality works the same way in a Power BI Dataset/Report that uses a live/direct query connection.

My question is, is it possible to achieve the same behavior in a Paginated Report published to Power BI Service and developed in Power BI Report Builder?

I've reviewed some Microsoft documentation (https://learn.microsoft.com/en-us/power-bi/paginated-reports/paginated-reports-rls) but haven't quite grasped how to make it work when roles are defined in Azure Analysis Services. 

Thanks in advance for the assistance.

Best regards,

Telmo Barbosa

[TelmoBarbosa]

Hi @v-zhengdxu-msft,

Thanks for the reply. Unfortunately the documentation you provided did not help.

I used the information shared in this link https://learn.microsoft.com/en-us/power-bi/guidance/migrate-ssrs-reports-to-power-bi to migrate the reports to Power BI Service, following this steps:

"Anyone with permission to access to the report server instance and the Power BI workspace can manually migrate reports to Power BI. Here are the steps to follow:

1. Open the report server portal that contains the reports you want to migrate.
2. Download each report definition, saving the .rdl files locally.
3. Open the latest version of Power BI Report Builder, and connect to the Power BI service using your Microsoft Entra ID (previously known as Azure Active Directory) credentials.
4. Open each report in Power BI Report Builder, and then:
   1. Verify all data sources and datasets are embedded in the report definition, and that they're supported data sources.
   2. Preview the report to ensure it renders correctly.
   3. Select Publish, then select Power BI service.
   4. Select the workspace where you want to save the report.
   5. Verify that the report saves. If certain features in your report design aren't yet supported, the save action will fail. You'll be notified of the reasons. You'll then need to revise your report design, and try saving again."

While I expected Power BI to secure the data based on the roles defined in the Azure Analysis Services Server and the user viewing the report, it appears that all queries made to the server are using the user who published the report, rather than the user who is currently viewing it.

I have reviewed the documentation regarding the usage of the "userid" parameter, but I am struggling to find a way to dynamically "call" a role using the "userid" parameter in the DAX query.

Any insights or guidance you can provide on this matter would be greatly appreciated.

Thanks in advance.

Best regards,

Telmo Barbosa

[TelmoBarbosa]

Hi,

I already managed to solve the problem. For me, it is not the correct solution but i did not find any other.

I have resolved the issue by publishing the reports using a user without server access. This allows queries to be made with the user ID of the viewer rather than the publishing user. I am considering opening a support request with Microsoft to seek further clarification and a potential long-term solution.

Best regars,

Telmo Barbosa

[v-zhengdxu-msft]

Hi @TelmoBarbosa 

Please check out the links below and hope they can help you achieve your requirements:

Publish .rdl files to Power BI from Power BI Report Server and Reporting Services - Power BI | Micro...

If you want to migrate RDL files to Workspace, there must meet two prerequisites:

• You have a Power BI Pro or Premium Per User license.
• You have write access to the workspace.

Some shared data sources and datasets aren't yet supported in the Power BI service. When you migrate .rdl reports, the RDL Migration Tool automatically converts shared datasets and data sources to embedded datasets and data sources, provided they're using supported datasets and data sources.

How to use rdl migration tool

Best Regards,

Zhengdong Xu

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.