Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Register now to learn Fabric in free live sessions led by the best Microsoft experts. From Apr 16 to May 9, in English and Spanish.

Using CustomData when accessing SSAS cube through enterprise gateway

Hi all,

 

I've been trying to use CustomData to provide the logged-in user's e-mail ID so that I could filter cube data based on that CustomData value.

 

The problem is that if I use CustomData then the EffectiveUsername is the OLAP Administrator (which is what is configured in the gateway's cube data source). This completely bypasses any cube security.

 

If, however, I use EffectiveUsername instead of CustomData, I only see the email in Profiler logs but what I see in the USERNAME field is DOMAIN\USER not the e-mail of the user accessing the cube?

 

Does anyone know of a way to access the logged in user's e-mail from the cube or is there any way the SSAS cube can be accessed without using an administrator account for the data source credentials?

 

Thanks in advance.

 

Status: New
Comments
tringuyenminh92
Memorable Member

As my understand your description, you want feature that allows user's email logged in power bi (something like abc@yourdomain.com or 123a@domain.onmicrosoft.com) could access your cube (which has user role in cube such as: user1@domainofcube.com, user2@domainofcube.com). Am i correct? if that, this is not a issue cause there is mapping feature that allow you configure it:

https://powerbi.microsoft.com/en-us/blog/tech-tip-thursday-user-principal-name-upn-mapping-in-power-...

 

 

apurohit
Frequent Visitor

Thanks for the reply  tringuyenminh92.

 

 

As UPN mapping is a per user & per data source mapping, this would need to be updated for each and every data source. There could be many data sources.

 

For example we could have:

 

user1@contoso.com maps to ADMIN

user2@contoso.com maps to MANAGER01

 

and so on and so forth.

 

Now, I have a User Dimension with an e-mail field as follows:

 

ADMIN's e-mail address is user1@contoso.com &

MANAGER01's e-mail address is user2@contoso.com

 

The only way UPN mapping would work for us is if there was a way to programmatically update the UPN mappings via a API call.

 

tringuyenminh92
Memorable Member

Hi @apurohit,

 

yeah, Agree with your suggestion, please let PBI team know about this idea by: http://ideas.powerbi.com

v-haibl-msft
Employee

 

The following idea should be same as you desired. Please vote it.

https://ideas.powerbi.com/forums/265200-power-bi-ideas/suggestions/16746946-manage-gateway-username-...

 

Best Regards,

Herbert