can ssrs detect rls and cls thru proxy like user ids?

• stan

  Ten Centuries

  Points: 1122

  More actions

  May 28, 2025 at 8:00 pm

  #4598964

  Hi we often use non expiring windows and sql accounts to actually run (credential wise) ssrs reports while individual users have access to the folder from where they can run the reports.  we also generate/render ssrs reports from .net applications where a proxy like (non expiring app acct) account's credentials have access to the ssrs folders.

  i know impersonation works from power bi and maybe ssas pivots too thru the user principal to minimally respect the rls rules, maybe cls too.   but i wonder if when a proxy like account is in the middle of an ssrs rendering, if its even conceivable (maybe thru kerberos) for a user principal like behavior to allow impersonation for table level (security policy ) security and/or column level (grant select on tablename (column1,column2,...) to ...) security.

• Site Owners

  SSC Guru

  Points: 80342

  More actions

  May 29, 2025 at 8:10 pm

  #4599552

  Thanks for posting your issue and hopefully someone will answer soon.

  This is an automated bump to increase visibility of your question.