Forum Discussion
PowerBI Service Kerberos connection
Hi,
I am connecting PBI service to an on prem Analysis Services tabular model and an on prem SQL Server database.
I have some dynamic row level security implemented in the AS model and directly with roles in PBI reports with SQL connections.
Apologies for the ingnorance, but I am trying to understand whether implementing Kerberos would help.
I assume the benefit for the SQL reports would be that I could pass through the user name and therefore implement RLS on the SQL Server (and not need to do it in each report)?
For the tabular connections, the roles pick up the effective user name, so would there be any change/ benefit for these connections?
Thanks for any pointers!
Hi mds166,
#1, By default, power bi will use configure gateway data source credentials to link to the data source. Kerberos feature allows you to use end-user credentials to connect to data that do the filter on the database side that not need the configurations on power bi side. (it will be applied to the reports that connect to this data source and enabled Kerberos feature)
#2, Nope, Kerberos feature not available on AS 'live' connection. I think it only affects on SQL server data source with direct query mode.
Regards,
Xiaoxin Sheng
3 Replies
- collinq
Super User
Hi mds166 ,
I think that you can pass the credentials using the Kerberos authentication. I am not a Kerberos expert though. This link has some segments on authentication and might be helpful.
https://docs.microsoft.com/en-us/power-bi/report-server/configure-kerberos-powerbi-reports
I would appreciate Kudos if my response was helpful. I would also appreciate it if you would Mark this As a Solution if it solved the problem. Thanks!
Hi mds166,
#1, By default, power bi will use configure gateway data source credentials to link to the data source. Kerberos feature allows you to use end-user credentials to connect to data that do the filter on the database side that not need the configurations on power bi side. (it will be applied to the reports that connect to this data source and enabled Kerberos feature)
#2, Nope, Kerberos feature not available on AS 'live' connection. I think it only affects on SQL server data source with direct query mode.
Regards,
Xiaoxin Sheng
