Security for SSAS imported mode

[Qxi_623]

Hi, I am new to PBI and a little confused about the security issue. I know Row level security supported in SSAS live connection, but I would like to make sure if any security available in import mode for SSAS tabular as data source. Anyone could advice? 

Thank you!!!

[v-sihou-msft]

@Qxi_623

As I tested, dynamic Row Level Security also works for SSAS tabular in import mode. When using import mode, you need to provide credentials. It will check current accessing user with Roles defined in Tabular model, then return corresponding records with row filters applied. So you just need to define the role security in Tabular model, it will secure data when users access via Power BI Desktop.

Regards,

[Qxi_623]

@v-sihou-msft

Thank you for your test! Now I know RLS can be done in SSAS both live and import mode. Actually I just got a requirement that create a report in Power BI desktop, which can restrict PBI report users to access the data. i.e. a user can read only his own clients data and be restricted to others.  I wonder if Manage roles is the only way to achieve that via Power BI, instead of SSAS side. We have a separate team working with SSAS. Like query parameter or filtering can not perform that in this case I think.  Very appreciate if you could give some advice. 

Thank you!

[BhaveshPatel]

Hi There,

Please refer to this blog for more information on Row Level Security in PowerBI.

Thanks & Regards,

Bhavesh

[Qxi_623]

Thank you very much. That's an excellent instruction!

[Seth_C_Bauer]

@v-sihou-msft While I know what you said is accurate for the report author... did you test the sharing component as well? My understanding of things would lead me to believe that if you just imported data from a SSAS source, the end user would see whatever the report author had permissions to see once content is shared with them. Import seperates the other model validations that are done with live connection... Unless I'm mistaken about something along the way here...

[Qxi_623]

@Seth_C_Bauer

I think you are right. The problem I having is to have end users seeing restricted data that's different from report author. I know we can use RLS in SSAS for that, but I was asked to figure out how to do via Power bi desktop or service, using import mode. What I know is creating different roles in desktop and use Security in power bi service.........My manager asked if there is any other option since developer could perform security in ssas cube. 

[Seth_C_Bauer · Accepted solution]

@Qxi_623 Power BI supports RLS and is applied to your solution in the Desktop. You can read about that here. It should be a very similiar experiance as that of the Tabular Role based application.

[Qxi_623]

Thank you for the link. I think that's the only way for that. 

Regards,