Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Register now to learn Fabric in free live sessions led by the best Microsoft experts. From Apr 16 to May 9, in English and Spanish.

Reply
YiBo
New Member

How to configure SSAS Connection in PowerBI Reportserver with form-based authentication

HI:

    I changed the PowerBI Reportserver from domain authentication to form authentication mode. How can reports connected to SSAS data sources display different data ranges based on the ID of the logged in user?  Any helpful answers would be greatly appreciated!

1 ACCEPTED SOLUTION
v-rongtiep-msft
Community Support
Community Support

Hi @YiBo ,

To have reports connected to SSAS data sources display different data ranges based on the user ID of the logged-in user, you'll want to implement dynamic row-level security (RLS) in SSAS.

  • Set up dynamic row-level security within your SSAS Tabular model. This involves creating roles and rules within SSAS that use the function or other mechanisms to filter data based on the user's identity.USERNAME().
  • Ensure that the security configuration within SSAS is working as expected by testing with multiple user IDs.
  • Choose the appropriate option, either "Import" or "Connect Live", depending on your design choice. Live connection is recommended for SSAS sources to enable real-time data access and dynamic security.
  • Since you've changed the authentication mode to forms authentication, make sure that the Power BI Report Server is correctly configured for this authentication mode.
  • The mapping between Power BI users and SSAS roles will need to be maintained within SSAS, as Power BI Report Server will pass the authenticated user's credentials to SSAS for data access.

Configure Custom or Forms Authentication on the Report Server - SQL Server Reporting Services (SSRS)...

Manage SQL Server Analysis Services data sources - Power BI | Microsoft Learn

Dynamic row-level security with Analysis services tabular model - Power BI | Microsoft Learn

 

 

How to Get Your Question Answered Quickly 

 

If I have misunderstood your meaning, please provide more details.

 

Best Regards
Community Support Team _ Rongtie

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

 

 

 

 

View solution in original post

2 REPLIES 2
v-rongtiep-msft
Community Support
Community Support

Hi @YiBo ,

To have reports connected to SSAS data sources display different data ranges based on the user ID of the logged-in user, you'll want to implement dynamic row-level security (RLS) in SSAS.

  • Set up dynamic row-level security within your SSAS Tabular model. This involves creating roles and rules within SSAS that use the function or other mechanisms to filter data based on the user's identity.USERNAME().
  • Ensure that the security configuration within SSAS is working as expected by testing with multiple user IDs.
  • Choose the appropriate option, either "Import" or "Connect Live", depending on your design choice. Live connection is recommended for SSAS sources to enable real-time data access and dynamic security.
  • Since you've changed the authentication mode to forms authentication, make sure that the Power BI Report Server is correctly configured for this authentication mode.
  • The mapping between Power BI users and SSAS roles will need to be maintained within SSAS, as Power BI Report Server will pass the authenticated user's credentials to SSAS for data access.

Configure Custom or Forms Authentication on the Report Server - SQL Server Reporting Services (SSRS)...

Manage SQL Server Analysis Services data sources - Power BI | Microsoft Learn

Dynamic row-level security with Analysis services tabular model - Power BI | Microsoft Learn

 

 

How to Get Your Question Answered Quickly 

 

If I have misunderstood your meaning, please provide more details.

 

Best Regards
Community Support Team _ Rongtie

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

 

 

 

 

Hi @v-rongtiep-msft ,

Thanks for your detailed guidance! How to set up dynamic row-level security within  SSAS multidimensional model? I have the following questions:

  1.  I've changed the authentication mode to forms authentication,but how to transmit the user ID on the web potal to the backend(SSAS).
  2. How to builds mapping tables to control user data access whitin SSAS?

I'm looking forward to your reply!😊

Best Regards

Helpful resources

Announcements
Microsoft Fabric Learn Together

Microsoft Fabric Learn Together

Covering the world! 9:00-10:30 AM Sydney, 4:00-5:30 PM CET (Paris/Berlin), 7:00-8:30 PM Mexico City

PBI_APRIL_CAROUSEL1

Power BI Monthly Update - April 2024

Check out the April 2024 Power BI update to learn about new features.

April Fabric Community Update

Fabric Community Update - April 2024

Find out what's new and trending in the Fabric Community.