Skip to content

Commit

Permalink
Security: Add Assign users to role (#103)
Browse files Browse the repository at this point in the history
* Include Role assignment

* Remove England tour from whats new
  • Loading branch information
mlonsk authored Jul 5, 2024
1 parent 7bac57d commit dc2a3ae
Show file tree
Hide file tree
Showing 2 changed files with 24 additions and 7 deletions.
25 changes: 24 additions & 1 deletion te3/tutorials/data-security/data-security-about.md
Original file line number Diff line number Diff line change
Expand Up @@ -81,10 +81,33 @@ _Rules_ are applied for each role to one or more objects, depending on the secur

#### 3. __Assign Users to Roles:__
Once configured in the dataset, users must be added to their respective roles.
- _Power BI:_ Roles are assigned via the __Power BI service__, [in the dataset settings from the Workspace](https://learn.microsoft.com/en-us/power-bi/enterprise-service-admin-rls#manage-security-on-your-model).
- _Power BI:_ Roles are assigned either via Tabular Editor or the __Power BI/Fabric service__, [in the dataset settings from the Workspace](https://learn.microsoft.com/en-us/fabric/security/service-admin-row-level-security#manage-security-on-your-model).
- _SSAS / AAS:_ Roles are assigned via the Role object, by right-clicking and selecting "Edit Members..."
- _Power BI Embedded:_ You must [generate an embed token](https://learn.microsoft.com/en-us/power-bi/developer/embedded/cloud-rls#generate-an-embed-token).

You can assign and remove users/groups from roles through Tabular Editor the following way:

1. Right-Click the __Role__, select __Edit members__...

<figure style="padding-top: 15px;">
<img class="noscale" src="~/images/data-security/data-security-edit-members.png" alt="Data Security Create Role" style="width: 550px;"/>
<figcaption style="font-size: 12px; padding-top: 10px; padding-bottom: 15px; padding-left: 75px; padding-right: 75px; color:#00766e"><strong>Figure 7:</strong>Users can be assigned to roles by right-clicking a Role and selecting <i>'Edit members...'.</i></figcaption>
</figure>

2. Click the __dropdown button__ on the 'Add Windows AD Member' button and choose __Azure AD Member__:

<figure style="padding-top: 15px;">
<img class="noscale" src="~/images/data-security/data-security-edit-members-dialog.png" alt="Data Security Create Role" style="width: 550px;"/>
<figcaption style="font-size: 12px; padding-top: 10px; padding-bottom: 15px; padding-left: 75px; padding-right: 75px; color:#00766e"><strong>Figure 8:</strong> For AAS/SSAS models, users can be added via the <i>'Edit members...'</i> dialog box.</figcaption>
</figure>

3. Specify the Azure AD user identity (typically, the user e-mail address) as the __Member Name__ property.
4. Click __OK__.
5. __Save__ the model.

> [!IMPORTANT]
> If your organisation is using on-premises Active Directory with SQL Server Analysis Services, you will need to use the __Windows AD Member__ option instead of __Azure AD Member__.
> [!NOTE]
> It is [recommended](https://learn.microsoft.com/en-us/power-bi/guidance/powerbi-implementation-planning-security-tenant-level-planning#strategy-for-using-groups) to manage Data Security and Access with [Azure Active Directory Groups](https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/how-to-manage-groups).
> <br>Using this approach is preferred you can centralize management of security & user segmentation.
Expand Down
6 changes: 0 additions & 6 deletions whats-new/index.html
Original file line number Diff line number Diff line change
Expand Up @@ -157,12 +157,6 @@ <h2>Tabular Editor Learn</h2>
<p><a href="https://tabulareditor.com/learn">tabulareditor.com/learn</a></p>
<img src="/images/SpacePartsCo_CharacterLineUp.png" />
<h2>Meet the team</h2>
<h3>England Tour June 2024</h3>
<ul>
<li><a href="https://www.meetup.com/london-fabug/">London Power BI User Group: Tabular Editor Deep Dive</a> 25th of June 2024</li>
<li><a href="https://www.meetup.com/newcastle-pug/events/301174438/">Newcastle Power BI User Group: Tabular Editor in the Toon!</a> 26th of June 2024</li>
<li><a href="https://www.meetup.com/pbimcr/events/301079892/">Manchester Power BI & Fabric User Group: Tabular Editor Takeover</a> 27th of June 2024</li>
</ul>
<h3>Tabular Editor Pre-con at Power BI Next Step:</h3>
<p><a href="https://powerbinextstep.com/2024/04/unlock-the-full-potential-of-semantic-models-with-tabular-editor/">Unlock the Full Potential of Semantic Models with Tabular Editor</a> 12th of September 2024</p>
<h3>The Tabular Editor Team will be at the following conferences:</h3>
Expand Down

0 comments on commit dc2a3ae

Please sign in to comment.