Gateway error - failed to impersonate user

[Kassie]

I created my first dashboard successfully on the desktop app and published it to the web. My database is in SQL Server and I am on the Pro Trial. I downloaded the Gateway and connected successfully. However when I try to set up the connection on the web app I get the above error. I have tried everything and I've been struggling for weeks. Can someone please help. I have downloaded and tried all gateways. I have now installed the latest one.

[Kassie]

Thank you, I read the SPN setup article, but I have no idee what to do. Must I copy and paste that script somewhere? Just so that you know, I signed in on the desktop BI and web BI with the same username and credentials. My domain is hosted by Office 365.

[v-xuding-msft]

Hi @Kassie ,

I think it might be caused by Kerberos. 

If the underlying database server and on-premises data gateway aren't appropriately configured for Kerberos constrained delegation, enable verbose logging on the gateway. Then, investigate based on the errors or traces in the gateway’s log files as a starting point for troubleshooting. To collect the gateway logs for viewing, see Collect logs from the on-premises data gateway app.

ImpersonationLevel

The ImpersonationLevel is related to the SPN setup or the local policy setting.

[DataMovement.PipeLine.GatewayDataAccess] About to impersonate user DOMAIN\User (IsAuthenticated: True, ImpersonationLevel: Identification)

Solution

Follow these steps to solve the issue.

1. Set up an SPN for the on-premises gateway.
2. Set up constrained delegation in your Active Directory.

Reference:

https://docs.microsoft.com/en-us/power-bi/service-gateway-onprem-tshoot#kerberos

Best Regards,

Xue Ding

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.