Domain account rights

Question

We are using the Power BI Report Server on premise.

I'm looking for some documentation about which rights the service account (domain user) should have for using constrained delegation.

Is it necessary to have set “impersonate a client after authentication”, “log on as a batch job” and “log on as a service”?

d_gosbell · Answer

From memory I don't recall having to specifically set any of those permissions when configuring Kerberos. I pretty much just walked through the following steps with one of our domain admins

https://docs.microsoft.com/en-au/power-bi/report-server/configure-kerberos-powerbi-reports?view=sql-server-2017

anonymous · Answer

Thanks for the answer. I also used this link for setting up our server, but that didn't helped. We need more details for setting it up. We just managed to get the single hop. Unfortunately we found no other (deeper) documentation about that.

Forum Discussion

Domain account rights

2 Replies

Related content

Community account support

Sharing rights for Contributor Role

Domain permissions & workspace roles

Purview and Fabric domains alignment

Domains and Workspace design