ad
6 TopicsRow-Level Security and AD groups
I'm using the same security model with dynamic row level security for some reports. I have 3 roles: AllItems - allows admin users to see everything. Users are added manually on the row-level security page for each report (I know I could use an AD group for this and may do so but it's only a small number of users). DirectAndIndirectReports - This is the default role and I have added this with an AD group that contains all users (domain\AllStaff) in the organisation on the row-level security page for each report. Level1 - This is to give access to users who need to see data for certain groups of staff who they do not manage. For Level1 I have to add each member on the RLS page for each report. So far I have about 10 people, but this number will grow and soon it will become a problem. I know I cannot assign the same AllStaff AD group to more than one role but if I create a new AllStaff AD group (e.g. domain\AllStaff2) containing all staff, will this create a conflict because users are in more than one role? If not how would the report server determine which role a user is in if they are in both AllStaff and AllStaff2? Any thoughts on this or any alternative way of managing multiple roles? ThanksSolved3.4KViews0likes8CommentsPower BI Report Server - add AD Group in the RLS
In the manage\security section it´s possible to add an Group or Users individually. Here all it´s work fine. When it´s added a Group, all member of this group are able to see the application. The problem happens when I try to add Group permission in Row Level Security. It doesn´t work. When I test with the users individually the RLS works, but when I use the group the RLS doesn´t work. Is there any additional configuration to set up that makes the AD-Group works in the RLS?4.4KViews0likes2CommentsUser Access Permission Replaced by Domain Controller User Permission Policy
Dear all and support team, I have a case where my PowerBI report server is accessed by unauthorized user. After checking the log files and do some testing, I found that the user have an ADMIN DOMAIN role on domain controller and further checking shows all user with same role (admin domain) have a permission to access all reports whereas I didn't assign the user on user permission/authentication configuration. Is it possible to apply only configuration from PowerBI report server rather than domain controller? or is there any specific configuration/setting that we need to review & adjust? Any support will greatly appreciated, thank you rachmat590Views0likes0CommentsAD authenticaion on local Power BI server (with SQL 2017)
Hi, I'm trying to find how to set up authentication to a local PowerBI report server (allow those in an AD group). It seems all the documentation is focussed on running via Azure and doesn't translate. Because of the type of data we have, we're actually legally obliged to NOT use cloud services, and even if we weren't, I'd want to avoid it. I would also like the authentication to be just to the server - and once you're in, authentication to the individual databases and datasets is 'hard coded' within the reports (ie. not having to create 150+ SQL accounts for each user). I've seen posts of people complaining about having a login, but again, these are all Azure-based, and don't seem to be relevant to a local BI report server. Thanks in advance for any advice/directions.12KViews0likes6CommentsOn-prem Report Server and Pro Accounts
We purchased SQL Server to get Power BI Report Server for an on-premises only solution. We purchased Power BI Pro subscriptions for report designers/authors. We setup users in Power BI Report Server using AD accounts. The AD accounts are different from the Pro subscription accounts. How is PBI Report Server going to know to allow a user to save a report from their Desktop app to the server if the accounts are different?Solved7.3KViews0likes9CommentsDeploy Power BI Report Server as SaaS solution
I was thinking of a possible power bi report server infrastructure deployed internally and shared with clients. To put it simple : they access our report server, and thanks to their data they can see the dashboards we created internally. That is to say using PBIRS as a software as a service model. Different chalenges are present : authentication ? Possible to authenticate customers if we use a combination of VPN + new records in our internal AD. If you have an other idea, don't hesitate to discuss it further. access to customer's data ? Main challenge ... The primary reason for everyone of using PBIRS is that we don't want cloud usage. Is there a way in such an infrastructure to connect our PBIRS internal server directly to an other customer's network on premises data sources ? Use case is as follow : e.g : Client -> connect to provider with VPN -> authenticate in AD with provided credentials -> connect to PBIRS with : PBIRS on Network 1 -> connecting directly with Customer's data on Network 21.1KViews0likes1Comment