Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Register now to learn Fabric in free live sessions led by the best Microsoft experts. From Apr 16 to May 9, in English and Spanish.

Reply
vedran
Frequent Visitor

Row Level Security in Power BI multidimensional SSAS

Hello guys,

 

I cannot find any confirmation that is possible to implement Power BI RLS with multidimensional SSAS (on-prem).

Everything that is decribed here https://powerbi.microsoft.com/en-us/documentation/powerbi-desktop-tutorial-row-level-security-onprem... is great for Tabular mode but I haven't find any example for multidimensional mode.

 

Does someone knows more on this topic?

 

Thank you

1 ACCEPTED SOLUTION
v-yuezhe-msft
Employee
Employee

Hi @vedran,

As described in this article, the effective username is passed to the gateway and then onto your on-premises Analysis Services server each time a user interacts a report connected to Analysis Services. The user principal name(UPN), typically the email address that you use to sign in Power BI with is passed to Analysis Services as the effective user.

The UPN is a property of an Active Directory account. That Windows account then needs to be present in an Analysis Services role to have access to the server. Analysis Services can provide filtering based on this account. The filtering can occur with either role based security, or row-level security. You would need to define security roles in your SSAS model in order to implement the role-based security.


Thanks,
Lydia Zhang

Community Support Team _ Lydia Zhang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

View solution in original post

1 REPLY 1
v-yuezhe-msft
Employee
Employee

Hi @vedran,

As described in this article, the effective username is passed to the gateway and then onto your on-premises Analysis Services server each time a user interacts a report connected to Analysis Services. The user principal name(UPN), typically the email address that you use to sign in Power BI with is passed to Analysis Services as the effective user.

The UPN is a property of an Active Directory account. That Windows account then needs to be present in an Analysis Services role to have access to the server. Analysis Services can provide filtering based on this account. The filtering can occur with either role based security, or row-level security. You would need to define security roles in your SSAS model in order to implement the role-based security.


Thanks,
Lydia Zhang

Community Support Team _ Lydia Zhang
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

Helpful resources

Announcements
Microsoft Fabric Learn Together

Microsoft Fabric Learn Together

Covering the world! 9:00-10:30 AM Sydney, 4:00-5:30 PM CET (Paris/Berlin), 7:00-8:30 PM Mexico City

PBI_APRIL_CAROUSEL1

Power BI Monthly Update - April 2024

Check out the April 2024 Power BI update to learn about new features.

April Fabric Community Update

Fabric Community Update - April 2024

Find out what's new and trending in the Fabric Community.

Top Solution Authors
Top Kudoed Authors