Where/how to deploy SSAS Tabular (on-prem or Azure) with SQL Always Encrypted

[Anonymous]

Hi all,

I am working with a client and we have very strict security requirements.  We are planning to use SQL's 'always encrypted' feature but need to understand better the pros & cons of deploying our data model using Analysis Services (Tabular Model) either on-prem or in Azure's Analysis Services.  Can anyone point me to a resource that can help me understand each approach and what the potential pitfalls of each/either are?  Does Microsoft maybe have some sort of solutions architect for premium capacity customers to help walk them through best practices in deployment?

Basic architecture: On-prem SQL Server data mart, data model build in AS (local or Azure), reports built in both PBI Desktop and Report Builder will be embedded (premium capacity) in a .NET intranet application integrated with Active Directory for authentication