This is really good, I have used User Mapping from the Gateway few times. But as you mentioned that i end up doing this for each data source while this will definitely helps with a caveat that organizations are ready for this. But this is good one.
Yes! setting up map usernames manually across a few data sources can be painful. This option definitely provides an easier approach. That can also be scriptable.
I'm sure the content is great. I haven't made it all the way through. I paused 26 seconds in so I could come here and ask you WHERE DID YOU GET THAT SHIRT??? I LOVE IT!!! -- Ok, back to watching....
I love this feature. I've been using it for a while . Is a great way to get ride of the manual upn mapping. Especially on big environments with thousands of users. you update the attributes in the AD , only once and then you are good to go. Keep it Awesome
Hello Adam It is necesary to do this procedure if the userPrincipalName is the same email value as I'm using to log to the powerbi portal? In our case is the same but cloud AD is not in sync with our local AD. So if it is not needed, Adusernamelookup and AdusernameReplacement properties should be left blank? Regards
Helpful Adam! Here is the problem we have been running into, in the case that we want a user to view a Power BI Report that is connected to a Analysis Services data source via the On Premise Data Gateway, but NOT have access to the data source itself. We are sensitive and have the need that we do not want some users being able to connect to the data source whether via Excel or Power BI desktop, or some other tool and writing their own reports or viewing the data without proper knowledge of how the data comes together or for other reasons. What we came up with is that we grant a domain service account membership within a SSAS cube role. We currently can do that mapping a Effective User Name in the manage gateway settings, but we ran into a road block, when we wanted to use dynamic role level security. Currently we are accomplishing this in SSRS, by using a shared data connection and using the CustomData field to pass in the userid in which we coded the row level filters to look at the CustomData field which contains the username (example connection string:Data Source=servername;Initial Catalog=dbname;CUSTOMDATA = {{ USERID }}. Then use the service account credentials). Since in the manage gateway settings we are mapping the Effective User Name, it will not allow us to set the customdata field to be used sent at the same time. Thoughts? Is there a better way or will this solution you presented will help?
Hi, I liked your explanation in your video. I have a question regarding Power BI with Active Directory. When I import the data from the Active Directory into Power BI, I see many missing values but when I check the same data in the Active Directory, the data is available there. Am I doing something wrong while importing the data from Active Directory?
Hello Adam. Great videio. Wondering if this can be used to connct to anythong other than SSAS? I have a need to connect to an on prem Oracle database. Can this technique be used to accomplish that?
Hi.. I have connected to active directory and got data.. but I cannot refresh the dataset in power bi service... May I know if there is a way to refresh dataset in power bi service without using gateway
Surely this process has been improved in 6 years. Anybody got another better way of doing this? I'm a lowly data analyst at a huge organisation whose tech team can handle switching on a gateway.
How can I pass External date filters(Like start and end date), inside the custom HTML Page so that report gets rendered when I pass those values and clicks on submit I have the below HTML Page which gives a embedded report but I am trying to work those input box's how can I do this? Is this possible or still present inside the ideas tab? Please guide my on it as How should I achieve this?
Hi Adam ! Thanks for your great explanation ! In your example, you try to match your powerBI login to a custom AD field. But if you have an application that embeds powerBI (and uses a single powerBI user), what you'd want is to match the login (that the user used to connect to the app) with a custom field. In the AD lookup, there's an input (your powerBI login, in your example), a lookup field, and an output (the local AD UPN). You explained how to specify wich field to use for the lookup and wich field to give as output, but I couldn't find where you could define the field used as input. Any clue on how to do this ?
I investigated a bit more, and let me see if I understood correctly : the input for the lookup is going to be whatever you put in the 'EffectiveIdentity' of the embed token, right ?
Newbie here - this looks like a feature i can use to accomplish RLS - I have sales people who have an ID# - i would put this in an AD attribute - as you cover in the video. The data has the ID#. So in the Managed Roles DAX expression - how do I access the AD variable - do I just specify e.g. PowerBILookup, like I would userprincipalname() ? Thanks
There is not a way to do this. It is either done by way of Active Directory (only option for DirectQuery), or through the Map user names on the Analysis Services side.
Also where do I find this file "Microsoft.PowerBI.DataMovement.Pipeline.GatewayCore.dll.config" as I do not have in this location "C:\Program Files\On-premises data gateway"
Map user names is specific to an Analysis Services data source configured within the gateway. It is located on the Users tab of the data source in the Power BI UI
The default location is: C:\Program Files\On-premises data gateway\Microsoft.PowerBI.DataMovement.Pipeline.GatewayCore.dll.config. That is the location on my machine.
Hi Adam. Good video. It allowed me to better understand the explanations on the Microsoft Website. Thank you very much ! 😊 However, I'm running into à but of a pickle. I changed the attributes in the dll file, but It doesn't seem to be taking the values of those attributes into account. I checked the logs and the mail is swapped for the exact same mail. I have tried other attributes but the results are always the exact same. Even if the attributes des not contain the mail, It still uses It. Any ideas ? If you have the time of course Thanks in advance 😀