Is running the PBI Report Server with a gMSA supported?

[JaniceP]

I currently have a Power BI Report Server running with a domain account and using kerberos to access other SQL Servers and SSAS.  I'm now trying a new install using a gMSA (group managed service account) as the Service Account running the PBIRS.  I have verified that the SPNs and delegations correspond to our running servers and they "look" correct.  However, whenever I try to access a report using Windows Auth for the data source, we get the dreaded "We couldn't connect to the Analysis Services server. Make sure you've entered the connection string correctly."

Is this a supported scenario, PBIRS using gMSA and kerberos to connect to other SQL Servers?

In the documentation at Configure the Report Server Service Account (Configuration Manager) - SQL Server Reporting Services ... (which is referenced from Install Power BI Report Server - Power BI | Microsoft Docs), it does not specifically call out gMSA as an option for the Service Account.

Are others running in this scenario?  Any tips, suggested documentation, etc?

Thanks so very much for any pointers/advice!  This wasn't easy the first 2 times and continues to be a challenge.  🤔

janice

[SeanCowburn]

Hi JaniceP,

FWIW, while this may technically work, the SQL Shack post indicates that it does, this is not supported for SSRS or PBIRS. See the documentation: Choose an account.

Best regards,

Sean

[v-luwang-msft]

Hi @JaniceP ，

You could refer the following article:

How to secure Reporting Services with Group Managed Service Accounts (GMSA)

Configure Kerberos to use Power BI reports - Power BI | Microsoft Docs

According the article ,it tells:

Open the Reporting Services Configuration Manager and from the Service Account tab delete the account info you have already and enter the GMSA name suffixed with a $ (dollar sign). This is important. Leave the password field blank and click Apply. (It will look like a password has been filled in once you Apply changes but you don’t provide this.

Did I answer your question? Mark my post as a solution!

Best Regards

Lucien

[JaniceP]

Hi Lucien,

Yes...I've seen those documents before.  I was always able to specify a gMSA, I just can't get the delegation to work.  So, since I've spent way too much time on this, I'm going back to a "normal" service account running the PBIRS and gMSAs running all of our other SQL Servers and SSAS.

Thanks!