cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
robrien6 Regular Visitor
Regular Visitor

Row level security with Premium embedded with live connection to on premise SSAS tabular????

i,

 

We are looking to deploy power bi reports to Premium embedded workspaces in the service.  The reports will be embedded in a website with application based authentication (*not Active Directory*) to serve B2B reporting.

 

The data for the reports will be served from a live connection to on-premise SSAS tabular cubes.

 

The clients for the reports are external users and the data in the cube is filterable based on their application userid.

 

Question:  Is it possible to securely filter the reports so that cutomers using them can *only* see the data for their role / company?

 

It seems that SSAS tabular getToken method only supports passing a username that is an AD user (with our clients are not) so normal RLS doesnt work.

 

How is secure RLS with on premise SASS and Power BI premuim possible??

1 ACCEPTED SOLUTION

Accepted Solutions
v-ljerr-msft Super Contributor
Super Contributor

Re: Row level security with Premium embedded with live connection to on premise SSAS tabular????

Hi @robrien6,

 

Based on my research, there should be two alternative options to implement RLS for non AD users with Power BI Embedded currently. Smiley Happy

 

Regards

View solution in original post

3 REPLIES 3
v-ljerr-msft Super Contributor
Super Contributor

Re: Row level security with Premium embedded with live connection to on premise SSAS tabular????

Hi @robrien6,

 

Based on my research, there should be two alternative options to implement RLS for non AD users with Power BI Embedded currently. Smiley Happy

 

Regards

View solution in original post

Highlighted
robrien6 Regular Visitor
Regular Visitor

Re: Row level security with Premium embedded with live connection to on premise SSAS tabular????

The custom data solution looks pretty good!

 

Is this at all supported?  We can't use the filters property as it seems like these can be manipulated in the browser etc to strip them out, which would give end users access to more data than they are allowed.

 

any probelms using the Customdata() property that you can think of?

 

Many thanks for you contrib!

v-ljerr-msft Super Contributor
Super Contributor

Re: Row level security with Premium embedded with live connection to on premise SSAS tabular????

Hi @robrien6,


Is this at all supported?  We can't use the filters property as it seems like these can be manipulated in the browser etc to strip them out, which would give end users access to more data than they are allowed.


Adding filter should be supported. Though I am not very familiar with JS, I think there is possibility that the filters could be changed by changing the script in browser as you mentioned.


any probelms using the Customdata() property that you can think of?


It seems to me that it's kindly the same as the normal RLS which filters data at dataset, and it's a safer way to go. Smiley Happy

 

Regards

Helpful resources

Announcements
October 2019 Community Highlights

October 2019 Community Highlights

October was a busy month in the community. Read the recap article to learn about some of the events and content.

New Badges

Incoming: New and Improved Badges

Exciting news: We've given our badges an overhaul and added brand news ones.

Ask Amir Anything

Exclusive LIVE Community Event No. 2 – Ask Amir Anything

Next in our Triple A series: Ask Amir Netz questions about the latest updates, features and future.

Analytics in Azure virtual event

Analytics in Azure virtual event

Experience a limitless analytics service built to ingest, prep, manage, and serve data for immediate use in Power BI.

Top Kudoed Authors
Users Online
Currently online: 165 members 1,464 guests
Please welcome our newest community members: