Row Level Security - Effective User Name

[Anonymous]

Hi,

Where I work we're in the process of rolling out Power BI with active row level security (RLS) against a live SSAS data connection.

When we have been testing the RLS we have been connecting to the data source using Excel and amending the effective user name in the data connection properties to impersonate the user to see what data they would see if they logged in.

My question - is there any way of doing this using Power BI, bareing in mind we're on a live SSAS connection?

My worry is that a report user will come back to us with a report query, but we won't be able to efficiently investigate the query as we cannot see what they can see (due to RLS).

Any ideas?

[dax · Accepted solution]

Hi @Anonymous , 

You could try to define the RLS in SSAS  model, and test this whether it work or not.  You could create a user table, which contains effective name, domain\username and corresponding value which it could view(use USERPRINCIPALNAME ( ) in RLS), then connect to fact table or dimension table, and set  RLS in model to see whether it work or not. And when you publish it to service, you also need to map effective name on domain\username  in datasource You could refer to Implement row-level security in an Analysis Services tabular model  for details.

Best Regards,
Zoe Zhi

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.