Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Register now to learn Fabric in free live sessions led by the best Microsoft experts. From Apr 16 to May 9, in English and Spanish.

Reply
JaniceP
Regular Visitor

Is running the PBI Report Server with a gMSA supported?

I currently have a Power BI Report Server running with a domain account and using kerberos to access other SQL Servers and SSAS.  I'm now trying a new install using a gMSA (group managed service account) as the Service Account running the PBIRS.  I have verified that the SPNs and delegations correspond to our running servers and they "look" correct.  However, whenever I try to access a report using Windows Auth for the data source, we get the dreaded "We couldn't connect to the Analysis Services server. Make sure you've entered the connection string correctly."

 

Is this a supported scenario, PBIRS using gMSA and kerberos to connect to other SQL Servers?

 

In the documentation at Configure the Report Server Service Account (Configuration Manager) - SQL Server Reporting Services ... (which is referenced from Install Power BI Report Server - Power BI | Microsoft Docs), it does not specifically call out gMSA as an option for the Service Account.

 

Are others running in this scenario?  Any tips, suggested documentation, etc?

 

Thanks so very much for any pointers/advice!  This wasn't easy the first 2 times and continues to be a challenge.  🤔

 

janice

3 REPLIES 3
SeanCowburn
Employee
Employee

Hi JaniceP,

 

FWIW, while this may technically work, the SQL Shack post indicates that it does, this is not supported for SSRS or PBIRS. See the documentation: Choose an account.

 

Best regards,

Sean

v-luwang-msft
Community Support
Community Support

Hi @JaniceP ,

You could refer the following article:

How to secure Reporting Services with Group Managed Service Accounts (GMSA)

Configure Kerberos to use Power BI reports - Power BI | Microsoft Docs

According the article ,it tells:

Open the Reporting Services Configuration Manager and from the Service Account tab delete the account info you have already and enter the GMSA name suffixed with a $ (dollar sign). This is important. Leave the password field blank and click Apply. (It will look like a password has been filled in once you Apply changes but you don’t provide this.

vluwangmsft_0-1641780792000.png

 

Did I answer your question? Mark my post as a solution!

 

Best Regards

Lucien

Hi Lucien,

 

Yes...I've seen those documents before.  I was always able to specify a gMSA, I just can't get the delegation to work.  So, since I've spent way too much time on this, I'm going back to a "normal" service account running the PBIRS and gMSAs running all of our other SQL Servers and SSAS.

 

Thanks!

Helpful resources

Announcements
Microsoft Fabric Learn Together

Microsoft Fabric Learn Together

Covering the world! 9:00-10:30 AM Sydney, 4:00-5:30 PM CET (Paris/Berlin), 7:00-8:30 PM Mexico City

PBI_APRIL_CAROUSEL1

Power BI Monthly Update - April 2024

Check out the April 2024 Power BI update to learn about new features.

April Fabric Community Update

Fabric Community Update - April 2024

Find out what's new and trending in the Fabric Community.