How do we create subscription for report in Power BI that is using underlying tabular model? Power BI is giving error while creating subscription saying "You cannot subscribe others because this artifact has row-level security or the dataset is using a Live Connection to Analysis Services"
I could create subscription for myself as I am admin for the workspace. But I can not add other email IDs in the subscription.
Row-level security (RLS) with Power BI is used to restrict data access for given users.
One workaround could be to add your co-workers as members of the workspace. because in Power BI service, members of a workspace have access to datasets in the workspace. RLS doesn't restrict this data access.
For more info, you can see this:
RLS in Power BI
Related
Recently I have been trying to connect a Google BigQuery database in Power BI Desktop. even though I managed to configure this I am not getting my total databases. To be precise, my private databases. I need to know why is that and about what permissions/IAM role I need, to configure this.
Thanks for any help.
I tried to connect using GCP credentials(company credentials). What I want is, I want all the databases loaded to Power BI and I want to know about the permission details for submission purposes.
How to transfer Power BI reports from one tenant to other tenant?
Looking out for a detailed procedure of migrating Power BI reports from one tenant to tenant.
Link: https://learn.microsoft.com/en-us/power-bi/connect-data/desktop-directquery-about#security
The article mentions
DirectQuery allows for a report viewer's credentials to be passed
through to the underlying source and security rules to be applied
there. Single sign-on is supported to SQL Azure datasources, and
through the data gateway to on-premises SQL servers.
This implies that report viewers credential is used to query underlying data.
Where as further down it contradicts this:
As discussed earlier in this article, a report in DirectQuery always
uses the same fixed credentials to connect to the underlying data
source, after it's published to the Power BI service. This behavior
applies to DirectQuery, not to live connections to SQL Server Analysis
Services, which is different in this respect. Immediately after
publish of a DirectQuery report, it's necessary to configure the
credentials of the user that will be used. Until you configure the
credentials, opening the report on the Power BI service would result
in an error.
Once the user credentials are provided, then those credentials will be
used whichever user who opens the report. In this way, it's exactly
like imported data. Every user sees the same data, unless row-level
security has been defined as part of the report.
Does direct query connect to sql server using gateway credential or report viewer credentials?
That doc is out-of-date. Single-Sign On (SSO) is available as an option for many cloud and on-prem data sources, including SQL Server and SSO is required for DirectQuery to Power BI Datasets.
All connections to remote Power BI Datasets models are made using
single sign-on.
Using DirectQuery for Power BI datasets and Analysis Services
I want to share my dashboard with external users. For this, I am using Tutorial: Embed Power BI content using a sample embed for your customers application. I am able to create a user in my Azure AD and now I am at Set up your Power BI embedding environment. Here I am unable to Grant Permission to my user.
Any help would be appreciated.
I've connected to an on premises SSAS data source with Power BI Desktop and could successfully publish to the web.
I would like to share the datasets themselves with users outside my organisation so that they can drag/drop the dimensions/measures and create reports and dashboards or reports that they would like to see.
From what I've read it's only possible to share preconfigured dashboards and reports with users outside my organisation. Could someone please tell me if it is possible to share the datasets themselves with users outside my organisation?
If you help the external company setup an On premises data gateway on a VM in your network and help them get it connected to your cube the the external users can publish the Power BI Desktop report to their Power BI tenant. Is there role based security in your cube that would apply to external users? If so you will need to setup an alternate UPN suffix and user accounts for the external users on your domain as described here. Or you could setup user mappings to use CustomData to pass their username in to your cube that way. With CustomData you change your SSAS roles to have only a service account as a member (not real users) then use the CustomData() MDX function in the dynamic security MDX expressions.
The whole scenario is described more fully here. Though I was talking about hosting in Azure with VMs joined to AAD Domain Services, you could so it with alternate UPN suffixes or CustomData in a regular Active Directory domain.
If your model is Tabular then Azure Analysis Services may greatly simplify the matter. If that's of interest let me know.