Find everything you need to get certified on Fabric—skills challenges, live sessions, exam prep, role guidance, and a 50 percent discount on exams.
Get startedEarn a 50% discount on the DP-600 certification exam by completing the Fabric 30 Days to Learn It challenge.
Hi All,
Can someone please tell me if I can implement Dynamic Row level Security in SSAS if my users have not joined a domain and my report server is also not on any domain?
Thanks,
Pragya Mishra
Solved! Go to Solution.
Hi @muchinski
Got this reply in a SSAS forum.
If you are not on a domain you will have to create local users on the server machine that is running SSAS with the identical username and password that your users use to logon to their client machines. Then you can put those local accounts from the server into roles in SSAS. When you are on a workgroup the user tokens get created by securely hashing the username and password so as long as these are identical the workgroup will map the client accounts to the server account. This also means that any time a user changes their local password you will also need to change the password for the account on the SSAS server.
So, I believe I should be able to do it. I shall test it soon enough. 🙂
Hi, no, you can't.
For Row Level Security, you rely on Windows Authentication. This is what allow you to use the USERNAME() function to dinamically filter the data on Roles.
Hi @muchinski
Got this reply in a SSAS forum.
If you are not on a domain you will have to create local users on the server machine that is running SSAS with the identical username and password that your users use to logon to their client machines. Then you can put those local accounts from the server into roles in SSAS. When you are on a workgroup the user tokens get created by securely hashing the username and password so as long as these are identical the workgroup will map the client accounts to the server account. This also means that any time a user changes their local password you will also need to change the password for the account on the SSAS server.
So, I believe I should be able to do it. I shall test it soon enough. 🙂