Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
4 years ago
Solved

PBE with Service Principal: Creating embed token for accessing dataset requires effective identity

We created a PBIX using a live connection to a SSAS database running in an Azure virtual machine. We published the PBIX to a workspace in Power BI Service, where the dataset connects to the SSAS data...
Need Help
  • V-lianl-msft's avatar
    V-lianl-msft
    4 years ago

    Power BI and SSAS both leverage AD so that means that any user you pass from Power BI to SSAS needs to be known in AD.You must grant the service principal ReadOverrideEffectiveIdentity permission. Otherwise, the service principal can’t delegate the user identity to the gateway.

    Please refer to :

    https://prologika.com/power-bi-embedded-service-principals-and-ssas/ 

Anonymous's avatar
Anonymous
Not applicable
4 years ago

UPDATE: We were able to prove that our ServicePrincipal registration works with datasets that connect through the on-premise data gateway to a SQL Server database instead of to SSAS. 

 

So again our question for Microsoft is: does Power BI embedded support ServicePrincipal authentication for a report whose dataset uses a live connection to a SSAS database via an on-premise data gateway?

 

If so, what additional steps are needed to avoid the "effective identity" error?

 

If not, where is this limitation documented?