Forum Discussion
Service Principal with Power BI using Data Gateway
Currently the Service principal account cannot leverage the On-Premises Data Gateway since it is not a mail-enabled account. This prevents a Power BI Embedded solution to leverage an on-premises SSAS tabular model using the service principal. Instead we need a full-blown power BI pro license for a service account. Is it on the roadmap to add this capability?
14 Replies
Hi
Impossible to add a AAD SP to gateway users (As adim for example)
But it can be done VIA powershell
This issue has been fixed in Q2 2023.
It is now possible to use the GUI to add a SPN as a user to a both the gateway and to the datasources on the gateway.
I did get a suggestion to try adding the Service Principal to an Azure AD group, make this group a gateway admin, and add user mapping in the gateway connection. Has anyone had success with this approach?
Was anyone ever able to solve this? I have the same issue. I was able to add the service principal to the data source on the on-premise gateway using the API; but it still doesn't seem to work even though the service principal now shows in the access list.
Followed the example here: https://docs.microsoft.com/en-us/rest/api/power-bi/gateways/adddatasourceuser - Tried using both ReadOverrideEffectiveIdentity and Read as the datasourceAccessRight
Hi AdamWidi / brentcarlson / baouss ,
Currently this is not yet implemented by PowerBI. I've already asked the same question long back and found this idea is already asked and waiting for more votes.
Please provide you vote for the below idea.
I'll reach out to powerbi team and will try to find the ETA for this feature.
Jayendran Thanks for the info! Let us know if you hear anything from the Power BI team on this issue.
Also, I read a Microsoft documents that states: Customers that configure row-level security (RLS) using an SQL Server Analysis Services (SSAS) on-premises live connection data source can enjoy the new service principal capability to manage users and their access to data in SSAS when integrating with Power BI Embedded. (https://docs.microsoft.com/en-us/power-bi/developer/embedded-row-level-security#on-premises-data-gateway-with-service-principal). This articles implies, that even though you have to use the API to add it, it should work? Based on what your saying is this documentation wrong (or am I misunderstanding it?)
Thanks!
Thanks brentcarlson for the link to the article. Based on the date of the post, the capabability was added after we initially attempted, so this may now be possible.
Hello Axires,
How did you manage to add the group you service principal belongs?
I tried to do it but when I call PBI API to get list of gateways, the result is empty.
Thanks
