Forum Discussion
SSAS cube access required for end users?
Hi All,
I have one query.When we create report based on SSAS cube in Power BI,publish that report to service & create gateway connection to refresh it from service.Now I want to provide access to 10 different users to that report in service.My question is do I need to add those users in SSAS cube level with permission of read & also do I need to add them in gateway connection access user list so they can see latest data.Or no need to add them in both SSAS cube level & gateway connection level.Please clarify.Thanks.
Or we need to add user in SSAS only when row level security is required.
Thanks,
Shashank
Hey,
if there is no security on dimensions and/or cells on the SSAS Cube (I assume SSAS multidimensional) you can establish a connection from the Power BI Service to the SSAS database via the gateway using a single user.
It's not necessary to add these users in the users pane during the data source configuration. Only user who will publish reports to a workspace using the SSAS Cube have to be added.
If there is some security configured on the database, things are getting a little more complex.
SSAS roles have to be defined on the SSAS database and the users have to be assigned to these roles.
As SSAS only allows windos authentication it is necessary to have some kind of Power BI Authentication to Windows Authentication becomes necessary.
This document explains how this has to be configured:
https://docs.microsoft.com/en-us/power-bi/connect-data/service-gateway-enterprise-manage-ssas
Look for the section "Active Directory Lookup Mapping"
There is also a great video by Adam Saxton (guninacube):
https://guyinacube.com/2018/01/23/power-bi-user-lookup-gateway-using-active-directory/
Hopefully, this provides what you are looking for.
Regards,
Tom
1 Reply
Hey,
if there is no security on dimensions and/or cells on the SSAS Cube (I assume SSAS multidimensional) you can establish a connection from the Power BI Service to the SSAS database via the gateway using a single user.
It's not necessary to add these users in the users pane during the data source configuration. Only user who will publish reports to a workspace using the SSAS Cube have to be added.
If there is some security configured on the database, things are getting a little more complex.
SSAS roles have to be defined on the SSAS database and the users have to be assigned to these roles.
As SSAS only allows windos authentication it is necessary to have some kind of Power BI Authentication to Windows Authentication becomes necessary.
This document explains how this has to be configured:
https://docs.microsoft.com/en-us/power-bi/connect-data/service-gateway-enterprise-manage-ssas
Look for the section "Active Directory Lookup Mapping"
There is also a great video by Adam Saxton (guninacube):
https://guyinacube.com/2018/01/23/power-bi-user-lookup-gateway-using-active-directory/
Hopefully, this provides what you are looking for.
Regards,
Tom