cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Anonymous
Not applicable

REST API to get role names (RLS) from power bi service

Hello, I have two questions related to power bi report and dataset.

 

1. I have looked at the REST API site (https://docs.microsoft.com/pt-br/rest/api/power-bi/datasets/get-datasets-in-group) to look for an endpoint that returns a effective identity related roles that are defined through Power BI desktop development with no luck.  Does anyone know what endpoint can I use to retrieve that information? 

2. what are the differences between EffectiveIdentyRole and EffectiveIdentity? (see the below example Json from the website  
 

 

 

{
  "value": [
    {
      "id": "cfafbeb1-8037-4d0c-896e-a46fb27ff229",
      "name": "SalesMarketing",
      "addRowsAPIEnabled": false,
      "configuredBy": "john@contoso.com",
      "isRefreshable": true,
      "isEffectiveIdentityRequired": false,
      "isEffectiveIdentityRolesRequired": false,
      "isOnPremGatewayRequired": false
    }
  ]
}

 

 

 Thanks! 

 

Sabrina

1 ACCEPTED SOLUTION
JZT
Frequent Visitor

Hi,

 

1. There is no Power BI REST API endpoint for this unfortunately. I've tried looking for the same and @lbendlin had pointed me in the DMV direction also. To expand on that, you can connect to the XMLA endpoint and run some queries. There are pros and cons. In case you want more info, here is some doco with examples: https://docs.microsoft.com/en-us/analysis-services/instances/use-dynamic-management-views-dmvs-to-mo...

 

Using the DMVs you can get roles, members, and the role filters per table, however only one view can be queried at a time with no joins allowed. I ended up building up data from the following DMVs:

 

$SYSTEM.TMSCHEMA_ROLES

$SYSTEM.TMSCHEMA_ROLE_MEMBERSHIPS

$SYSTEM.TMSCHEMA_TABLES

$SYSTEM.TMSCHEMA_TABLE_PERMISSIONS

 

Here's a link to my previous post if you're interested (there is a analysis.windows.net API endpoint you could call but I couldn't make it work): https://community.powerbi.com/t5/Developer/How-to-get-model-not-Dataset-ID-Part-of-getting-RLS-Roles...

 

2. From the doco (https://docs.microsoft.com/en-us/rest/api/power-bi/admin/datasets-get-datasets-as-admin#dataset)

 

IsEffectiveIdentityRequired

Whether the dataset requires an effective identity. This indicates that you must send an effective identity using the GenerateToken API.

IsEffectiveIdentityRolesRequired

Whether RLS is defined inside the PBIX file. This indicates that you must specify a role.

 

Hope that helped.

View solution in original post

3 REPLIES 3
JZT
Frequent Visitor

Hi,

 

1. There is no Power BI REST API endpoint for this unfortunately. I've tried looking for the same and @lbendlin had pointed me in the DMV direction also. To expand on that, you can connect to the XMLA endpoint and run some queries. There are pros and cons. In case you want more info, here is some doco with examples: https://docs.microsoft.com/en-us/analysis-services/instances/use-dynamic-management-views-dmvs-to-mo...

 

Using the DMVs you can get roles, members, and the role filters per table, however only one view can be queried at a time with no joins allowed. I ended up building up data from the following DMVs:

 

$SYSTEM.TMSCHEMA_ROLES

$SYSTEM.TMSCHEMA_ROLE_MEMBERSHIPS

$SYSTEM.TMSCHEMA_TABLES

$SYSTEM.TMSCHEMA_TABLE_PERMISSIONS

 

Here's a link to my previous post if you're interested (there is a analysis.windows.net API endpoint you could call but I couldn't make it work): https://community.powerbi.com/t5/Developer/How-to-get-model-not-Dataset-ID-Part-of-getting-RLS-Roles...

 

2. From the doco (https://docs.microsoft.com/en-us/rest/api/power-bi/admin/datasets-get-datasets-as-admin#dataset)

 

IsEffectiveIdentityRequired

Whether the dataset requires an effective identity. This indicates that you must send an effective identity using the GenerateToken API.

IsEffectiveIdentityRolesRequired

Whether RLS is defined inside the PBIX file. This indicates that you must specify a role.

 

Hope that helped.

Anonymous
Not applicable

Thank you!

lbendlin
Super User
Super User

You can get the RLS roles through DMV queries against the XMLA endpoint.

Helpful resources

Announcements
Carousel_PBI_Wave1

2023 Release Wave 1 Plans

Power BI release plans for 2023 release wave 1 describes all new features releasing from April 2023 through September 2023.

Power BI Dev Camp Session 30

Ted's Dev Camp - January 26, 2023

This session will provide guidance and teach campers the skills required to build Power BI reports that support multiple languages.

Power BI Summit Carousel 2

Global Power BI Training

Make sure you register today for the Power BI Summit 2023. Don't miss all of the great sessions and speakers!

Thank you 2022 Review

2022 Monthly Feature Releases

We had a great 2022 with a ton of feature releases to help you drive a data culture.