cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Highlighted
Helper V
Helper V

Roles and Row Level Security

Hi,

 

We have Power BI Rpeort Server (May 2019 ) on-prem ediion installed

 

We have created reports connecting to SSAS Tabular Mode (Live Connection)

 

We have implemented Custom Authentication (reference: https://github.com/Microsoft/Reporting-Services/tree/master/CustomSecuritySample)

 

We have some folder and sub folders in our PBIRS. Need to give restricted access to folders to users(around 150 users) based on Roles 

Also need to implement Row Level Security 

 

Can someone please provide any link on how to create Roles and implement Row Level and  Assign it to Users

and if it is to be done on SSAS , how can username (custom authentication) be mapped ?

 

Can some one guide on the same?

2 REPLIES 2
Highlighted
New Member

Re: Roles and Row Level Security

RLS:

Does your dataset have a column which matches or refers to your userid?

In the designer, click on Modelling and then Manage roles.

You need to create a role for each user, the DAX expression would be something like

[EMAILADDRESS]="name@domain.com".

You might then have another dataset on your report which would be filtered like

[CUSTOMERID]="123456", assuming that when name@domain.com logs in, they would only need to see data referring to CUSTOMERID 123456.

HTH

 

 

Highlighted
Super User III
Super User III

Re: Roles and Row Level Security


@GuestUser wrote:

 

and if it is to be done on SSAS , how can username (custom authentication) be mapped ?

 


I'm sorry, but I don't believe this is possible.

 

In your scenario with live connection RLS would have to be implemented in SSAS, but SSAS only supports Windows Auth. It does have a CustomData() function which allows you to read the CustomData parameter off the connection string or the EffectiveUserName parameter, but only RDL based paginated reports allow you to use dynamic connection strings where you could inject these parameters. PBIX files use Power Query connectors and they do not allow for the injection of custom connection string parameters.

Helpful resources

Announcements
Community Blog

Community Blog

Visit our Community Blog for articles, guides, and information created by fellow community members.

Using the Community

Using the Community

Need help with the Power BI Community? Our 'Using the Community' support articles are a great place to start.

Community Summit North America

Community Summit North America

Innovate, Collaborate, Grow. The top training and networking event across the globe for Microsoft Business Applications

Power Platform 2020 release wave 2 plan

Power Platform 2020 release wave 2 plan

Features releasing from October 2020 through March 2021

Top Kudoed Authors