Skip to main content
Solved

RLS in PowerBI Endpoint model in TX 6675.2


I am currently testing RLS using a powerbi premium endpoint with the TX 6675.2 version. 

Normally we use dynamic RLS, but since this did not work, for now i tried a manual setup:

 

 

I have added my user to a created Role

 

Then i have set the security setup and the endpoint to the Role i created.

The outcome in PowerBi Desktop when i connect to the PowerBI premium endpoint in the onelake datahun is that i don't see anything. No data at all. I would have expected that i would see the data for Bejo Andes Ltda.

Is this the correct setup for RLS in a PowerBI endpoint or am i missing something?

Best answer by Thomas Lind

Hi @RobertU 

The rights are saved on the DW instance data area that is connected to the SSL instance. We found that it was empty even after executions. So this was a bug. We have a release with a fix I can send to you.

The guy who found it @KaiMueller also worked out a workaround.

we found a workaround:
We deploy the SSL which creates the security table.
We then create a view with the same name as the security table (and delete the security table).
We can then deploy & execute the SSL as normal and TX uses the view (this seems a litle bit like a pssible security problem to me :)).
This works for now, but is hard to maintain for a lot of security rules.

View original
Did this topic help you find an answer to your question?

3 replies

Thomas Lind
Community Manager
Forum|alt.badge.img+5
  • Community Manager
  • 1020 replies
  • Answer
  • July 8, 2024

Hi @RobertU 

The rights are saved on the DW instance data area that is connected to the SSL instance. We found that it was empty even after executions. So this was a bug. We have a release with a fix I can send to you.

The guy who found it @KaiMueller also worked out a workaround.

we found a workaround:
We deploy the SSL which creates the security table.
We then create a view with the same name as the security table (and delete the security table).
We can then deploy & execute the SSL as normal and TX uses the view (this seems a litle bit like a pssible security problem to me :)).
This works for now, but is hard to maintain for a lot of security rules.


  • Author
  • Participant
  • 25 replies
  • July 9, 2024

@Thomas Lind Thank you for the info. If you can send me the release with the fix that would be really nice.


Thomas Lind
Community Manager
Forum|alt.badge.img+5
  • Community Manager
  • 1020 replies
  • July 9, 2024
RobertU wrote:

@Thomas Lind Thank you for the info. If you can send me the release with the fix that would be really nice.

I sent it to you through support.


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings