Solved

RLS in PowerBI Endpoint model in TX 6675.2


I am currently testing RLS using a powerbi premium endpoint with the TX 6675.2 version. 

Normally we use dynamic RLS, but since this did not work, for now i tried a manual setup:

 

 

I have added my user to a created Role

 

Then i have set the security setup and the endpoint to the Role i created.

The outcome in PowerBi Desktop when i connect to the PowerBI premium endpoint in the onelake datahun is that i don't see anything. No data at all. I would have expected that i would see the data for Bejo Andes Ltda.

Is this the correct setup for RLS in a PowerBI endpoint or am i missing something?

icon

Best answer by Thomas Lind 8 July 2024, 15:50

View original

3 replies

Userlevel 6
Badge +5

Hi @RobertU 

The rights are saved on the DW instance data area that is connected to the SSL instance. We found that it was empty even after executions. So this was a bug. We have a release with a fix I can send to you.

The guy who found it @KaiMueller also worked out a workaround.

we found a workaround:
We deploy the SSL which creates the security table.
We then create a view with the same name as the security table (and delete the security table).
We can then deploy & execute the SSL as normal and TX uses the view (this seems a litle bit like a pssible security problem to me :)).
This works for now, but is hard to maintain for a lot of security rules.

@Thomas Lind Thank you for the info. If you can send me the release with the fix that would be really nice.

Userlevel 6
Badge +5

@Thomas Lind Thank you for the info. If you can send me the release with the fix that would be really nice.

I sent it to you through support.

Reply