Forum Discussion

Pker_Tank's avatar
Pker_Tank
Regular Visitor
1 year ago
Solved

Role base access - Redshift & Power BI

Hello,

 

I have these two interesting questions.

 

1. If I connect my power BI to Amazon Redshift, with Directquery mode or Live Connection or Import mode (you need to tell which works best here) and setup Rbac policies on Redshift level. 
Question: Should I need to setup RBAC policies in Power BI again or does Power BI inheret Rbac policies from Redshift?
I do have a SSO already. 

 

2. if I need to create deployment stages, with 2 service accounts, one for Non-Prod and one for Prod. How can manage deployments? should I give my pipelines Admin access to service account and login and click the deploy everytime? or should I look into Service Principle Concept (Don't really know much)

Thanks heaps

Need Help
  • Poojara_D12's avatar
    Poojara_D12
    1 year ago

    Hi Pker_Tank 

    When connecting Power BI to Amazon Redshift, DirectQuery with SSO is the best approach if you want Power BI to inherit Redshift RBAC policies dynamically, as queries run in real-time with the user's credentials. In Import mode, RBAC applies only at refresh time, and all users see the same data unless RLS is configured in Power BI. Live Connection is not supported for Redshift. For deployment management across Non-Prod and Prod using two service accounts, you can either manually grant Admin access to service accounts and deploy through the Power BI pipeline UI or use a Service Principal (SP) for automation. A Service Principal allows Power BI REST APIs or PowerShell scripts to automate deployments without interactive login, making it the recommended approach for efficiency and security.

     

     

2 Replies

  • Poojara_D12's avatar
    Poojara_D12
    Super User
    1 year ago

    Hi Pker_Tank 

    When connecting Power BI to Amazon Redshift, DirectQuery with SSO is the best approach if you want Power BI to inherit Redshift RBAC policies dynamically, as queries run in real-time with the user's credentials. In Import mode, RBAC applies only at refresh time, and all users see the same data unless RLS is configured in Power BI. Live Connection is not supported for Redshift. For deployment management across Non-Prod and Prod using two service accounts, you can either manually grant Admin access to service accounts and deploy through the Power BI pipeline UI or use a Service Principal (SP) for automation. A Service Principal allows Power BI REST APIs or PowerShell scripts to automate deployments without interactive login, making it the recommended approach for efficiency and security.

     

     

  • Anonymous's avatar
    Anonymous
    Not applicable
    1 year ago

    Hi Pker_Tank,

    Thanks for reaching out to the Microsoft fabric community forum.

     

    It looks like you want to connect PowerBi with Amazon Redshift and is looking for the best approach to connect them and also if RBAC policies will be inherited directly from RedShift by PowerBi or not. Also you issues with managing your deployments. If the solution provided by Poojara_D12 solves your issues, please accept it as solution. 

     

    I would also take a moment to thank Poojara_D12, for actively participating in the community forum and for the solutions you’ve been sharing in the community forum. Your contributions make a real difference.

     

    If I misunderstand your needs or you still have problems on it, please feel free to let us know.  

    Best Regards,
    Hammad.
    Community Support Team

     

    If this post helps then please mark it as a solution, so that other members find it more quickly.

    Thank you.