Hi,
Im struggling here 😞
Heres my setup:
On Power Bi:
-Premium tenant with a workspace with assigned capacity.
On the very same server i have:
-Power BI Gateway Version 3000.9.194 (September 2019).
-SSAS Tabular 2012 Instance with a Cube that has role based security. (User test should see only one record, I see everything)
Facts:
-The SSAS Tabular server and the SQL Browser are both running under different AD accounts with their corresponding SPNS configured.
-The Gateway service is running under an AD service account with its own spn and kerberos delegation enabled to the spns of the SSAS tabular server and the SQL Browser.
-The Cube is mapped in the gateway. The credentials used are the ones of an administrator of SSAS Tabular instance.
-When the test user connects directly to the cube through excel, he sees the one record he should.
-I created a power bi "dashboard" that connects "live" to the cube, and when the test user executes it, he sees only the correct record. (I traced the query with sql profiler and indeed the effective user name property is being inserted in the request)
-Finally, i created a paginated report that connects to the very same cube. The test user sees EVERYTHING. The sql profile indeed does not show the effective user name property being included.
Has anyone experienced this?
