Seeking solutions for RLS on an embedded report using a live connection

[Anonymous]

I'd like to pick the community's brain on solutions for RLS when a report is embedded. 

Currently, we use RLS on Power BI using an import connection to an analysis services cube. Our web app passes the identifier to the report & users only see what they should. The issue is that import is a difficult model to maintain when you're working with a lot of data. I'd like to move toward a live conneciton, though I know it is not supported. 

Would it be possible to setup RLS on the Analysis Services side, create a report using a live connection, publish & embed this to use RLS?

Would it be possible to use parameters in any way to mimic RLS using a live connection?

Thank you in advance!

[luisrh]

For the longest time there has been a solution where you contain the security for dimensions on the model and then filter out based on the user name.   This solution works well,  but in scenarios where you have multiple hops  (client to server,  to yet another server),  the authentication is dropped unless you are using Kerberos.

Using CUSTOMDATA is an approach that will work across the board.  It requires you maintain a 'bridge dimension' in your SSAS model  - which is simply a key value pair of user and entity rights...

This is a good post with an explanation on how to go about it..

https://www.kasperonbi.com/using-customdata-and-ssas-with-power-bi-embedded/

If you think this answered your question mark it as solved so others can easily find in search.

[Anonymous]

Our customers accessing the report are not a part of our active directory. Would your recommended approaches work in this scenario?

[luisrh]

Yes it would.  As this is where you would set the CUSTOMDATA with any user name you pass.