Forum Discussion

manoj_0911's avatar
manoj_0911
Kudo Commander
5 months ago
Solved

Best Practice for Service Accounts

Is it recommended to use a dedicated service account for OAuth authentication in Power BI datasets rather than a personal developer account?

  • In practice it is usually better to avoid a personal developer account for production dataset credentials.For scheduled refresh, Power BI stores and uses dataset credentials in the service, and OAuth-based refresh depends on those stored credentials remaining valid. If the underlying account is changed, disabled, or its token can no longer be refreshed, refresh can fail and require reauthentication.

4 Replies

  • For authoring you will need personal developer accounts to create and publish reports in the service.  For refreshing and managing a service account can work well, especially if you are working with an on-prem gateway to refresh your reports.  With on-prem gateways a service account can streamline/limit credentials that are loading data into production reports.  It really comes down to organizational policy when it comes to database access.

  • In practice it is usually better to avoid a personal developer account for production dataset credentials.For scheduled refresh, Power BI stores and uses dataset credentials in the service, and OAuth-based refresh depends on those stored credentials remaining valid. If the underlying account is changed, disabled, or its token can no longer be refreshed, refresh can fail and require reauthentication.

  • v-hashadapu's avatar
    v-hashadapu
    Community Support

    Hi manoj_0911 , Thank you for reaching out to the Microsoft Community Forum.

     

    We find the answer shared by cengizhanarslan  is appropriate. Can you please confirm if the solution worked for you. It will help others with similar issues find the answer easily.

     

    Thank you cengizhanarslan  for your valuable response.

  • v-hashadapu's avatar
    v-hashadapu
    Community Support

    Hi manoj_0911 , Hope you are doing well. Kindly let us know if the issue has been resolved or if further assistance is needed. Your input could be helpful to others in the community.