cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Highlighted
kadingo Helper I
Helper I

How does RLS work with SSAS tabular, Power BI Import connection and power bi service

May some one help me understand how row level security that has been implemented at SSAS tabular model level work with power BI reports published to the power BI service when the reports are using import connection method (NOT live connection).

 

I'm at the start of a project that is going to use SSAS tabular model and one of the requirements is that row level security is a must. 

If i want to do things right from the beginning, is it ok to just implement row level security at the SSAS cube, then use any power bi connection method (live or import) and everything will play nice when i publish and share my reports, datasets and dashboards in the service.

 

My goal is to get this right early before time and resources are wasted but searches can't seem to find any official clear direction about this.

1 ACCEPTED SOLUTION

Accepted Solutions
Microsoft v-alq-msft
Microsoft

Re: How does RLS work with SSAS tabular, Power BI Import connection and power bi service

Hi, @kadingo 

 

If your data source already has security roles defined and you are using import data into your Power BI dataset, the security roles in your data source aren't used. In this case, you should define RLS to enforce security rules for users who connect in Power BI. And in the Import mode, the data source content is cached into the desktop, so it has nothing to do with the original source. Unlike DQ and LC, it is also equivalent to real time.

 

Best Regards

Allan

 

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

 

View solution in original post

6 REPLIES 6
Super User III
Super User III

Re: How does RLS work with SSAS tabular, Power BI Import connection and power bi service

Hi @kadingo ,

 

if you imported the data into Power BI, you configure RLS with Power BI Desktop.

If you use a live connection, you configure RLS on the on-premises model.

 

https://docs.microsoft.com/en-us/power-bi/service-admin-rls

 

Did I answer your question?
Please mark my post as solution, this will also help others.
Please give Kudos for support.

Proud to be a Super User!

Microsoft v-alq-msft
Microsoft

Re: How does RLS work with SSAS tabular, Power BI Import connection and power bi service

Hi, @kadingo 

 

If you import data from SSAS into Power BI Desktop, you can define roles and rules in Power BI Desktop and then validate the role within Power BI Service. If you are using a live connection to SSAS, you won't be able to configure RLS within Power BI Service. It is defined within the SSAS model on-premises.

 

For further information, you may refer to the following links.

https://docs.microsoft.com/en-us/power-bi/desktop-tutorial-row-level-security-onprem-ssas-tabular

https://docs.microsoft.com/en-us/power-bi/service-admin-rls

 

Best Regards

Allan

 

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

kadingo Helper I
Helper I

Re: How does RLS work with SSAS tabular, Power BI Import connection and power bi service

@mwegener  So its correct to take it that RLS implemented on the SSAS on-premises model does not work when one is using import connection method in Power BI desktop, right?. If i want RLS in the power BI service and i have implemented it at the SSAS on-premises model, then i MUST buld my reports in power bi desktop using live connection only NOT import, correct?

Super User III
Super User III

Re: How does RLS work with SSAS tabular, Power BI Import connection and power bi service

Hi @kadingo ,

 

yes. If you import the data, you create a new model with a new security layer.

Did I answer your question?
Please mark my post as solution, this will also help others.
Please give Kudos for support.

Proud to be a Super User!

kadingo Helper I
Helper I

Re: How does RLS work with SSAS tabular, Power BI Import connection and power bi service

@v-alq-msft  You mention that 


@v-alq-msft wrote:

Hi, @kadingo 

 

If you import data from SSAS into Power BI Desktop, you can define roles and rules in Power BI Desktop and then validate the role within Power BI Service. If you are using a live connection to SSAS, you won't be able to configure RLS within Power BI Service. It is defined within the SSAS model on-premises.

 

For further information, you may refer to the following links.

https://docs.microsoft.com/en-us/power-bi/desktop-tutorial-row-level-security-onprem-ssas-tabular

https://docs.microsoft.com/en-us/power-bi/service-admin-rls

 

Best Regards

Allan

 

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.


Does this mean i can not take advantage of RLS defined within the SSAS model on-premises if i import data from SSAS into Power BI Desktop?.

 

I have existing reports using import method and i plan to define  RLS within my SSAS model on-premises, can those existing reports take advantage of RLS that is going to be defined within my SSAS model on-premises OR i will have to redesign those reports using live connection to be able to take advantage of RLS defined at the model.

 

The important think to note here is that i have existing reports that are using import method and RLS will be defined within my SSAS model on-premises. Will my reports be able to use that RLS or i will have to redesign them using live connection?

 

 

Microsoft v-alq-msft
Microsoft

Re: How does RLS work with SSAS tabular, Power BI Import connection and power bi service

Hi, @kadingo 

 

If your data source already has security roles defined and you are using import data into your Power BI dataset, the security roles in your data source aren't used. In this case, you should define RLS to enforce security rules for users who connect in Power BI. And in the Import mode, the data source content is cached into the desktop, so it has nothing to do with the original source. Unlike DQ and LC, it is also equivalent to real time.

 

Best Regards

Allan

 

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

 

View solution in original post

Helpful resources

Announcements
New Ranks Launched March 24th!

New Ranks Launched March 24th!

The time has come: We are finally able to share more details on the brand-new ranks coming to the Power BI Community!

‘Better Together’ Contest Finalists Announced!

‘Better Together’ Contest Finalists Announced!

Congrats to the finalists of our ‘Better Together’-themed T-shirt design contest! Click for the top entries.

Arun 'Triple A' Event Video, Q&A, and Slides

Arun 'Triple A' Event Video, Q&A, and Slides

Missed the Arun 'Triple A' event or want to revisit it? We've got you covered! Check out the video, Q&A, and slides now.

Top Solution Authors
Top Kudoed Authors