SSAS MD / Power BI Gateway / Effective user names

[Raoul]

Hi there,

I have been trying to set up a SSAS MD live connection but after a few hours I still dont have it working.

I have followed this:c

https://powerbi.microsoft.com/en-us/blog/how-authentication-with-analysis-services-live-connections-...

My situation:

Azure VM machine: remote connection with Admin credentials

- Has analysis services MD cube.

 --> uses CompanyNameDWH\Admin (so the domain is not just CompanyName but has DWH behind it).

- Has enterprise gateway installed and reports that the Cube is online and ready to be used.

--> this uses my organizational e-mail (e.g. raoul@CompanyName.com).

- Has Power BI desktop which has a live connection the the azure remote machine analysis service which works fine.

--> this uses raoul@CompanyName.com aswell.

I setup the gateway in manage gateways on app.powerbi.com and the connection is working (using CompanyNameDWH\Admin user credentials to login to the MD cube).

Now I have published a report to app.powerbi.com to share within my organization.

I open the report and I receive a:

There was a data source access error. Please contact the gateway administrator.

When I create a new workspace and then try to connect to the analysis service I get the the following error:

The following system error occured: the name provided is not a properly formed account name.

So I thought, well this must be cause of the the CompanyNameDWH and @CompanyName.com are not in the same domain so let's use the map (effective) user names function in manage gateways:

I set that up in the following way:

Replace:  raoul@CompanyName.com WITH CompanyNameDWH\Admin 

But that does not work.. ?

I have tried creating a local admin account with my own name as username and use that instead but the same thing happened: There was a data source access error. Please contact the gateway administrator.

Doesnt effective usernames work that way? I really have to make the azure machine domain-joined for this to work?

[v-sihou-msft · Accepted solution]

@Raoul

As mentioned in your followed article:

The email address that is passed into EffectiveUserName has to match a UPN property on a local Active Directory account. For this reason, the Analysis Services machine has to be joined to a domain. The domain of the email address has to match a UPN Suffix within your local Active Directory.

So your Azure VM must be in a domain so that this authentication will work. See a similar thread below:

https://community.powerbi.com/t5/Integrations-with-Files-and/Connecting-to-SSAS-tabular-model/td-p/7...

Regards,