Forum Discussion
Live connection to SSAS
Thank you much appreciated.
We've checked configuration Kerberos configs and other and they are looking correct. However I've noticed that some request to SSAS are requested in anonymous logon whihc is not allowed. How can I change it from PBRIS to stop anonymous connections when it is direct/live query of SSAS?
TAXenia
Thank you much appreciated.
We've checked configuration Kerberos configs and other and they are looking correct. However I've noticed that some request to SSAS are requested in anonymous logon whihc is not allowed. How can I change it from PBRIS to stop anonymous connections when it is direct/live query of SSAS?
TA
Xenia
Hi XeniaLi
Thank you for reaching out to the Microsoft Fabric Forum Community.
XeniaLi - please look into below points.
- Go to your Power BI Report Server and open the data source settings for the report connected to SSAS.
- Under the Data Sources section, check the authentication method being used.
- If it's set to "Credentials are not required", it allows anonymous access, which should be avoided in production.
- Change the setting to "Windows Integrated Security" to pass the current user's Windows credentials to SSAS. This requires proper Kerberos delegation between PBIRS and SSAS.
- Make sure SPNs are registered for both servers and that the PBIRS service account is trusted for delegation in Active Directory.
- If Kerberos setup isn’t possible right now, you can use "Credentials stored securely in the report server" with a domain account. This avoids anonymous access but disables user-level RLS.
- Avoid "Prompt for credentials", and never use "Credentials are not required" in production unless you're working in a test-only setup.
- After updating the setting, test the report to ensure it connects correctly and uses the expected identity.
If this information is helpful, please “Accept as solution” to assist other community members in resolving similar issues more efficiently.
Thank you.
Hi XeniaLi
I hope the information shared was helpful to you. If your question has been answered, kindly mark the most relevant reply as the Accepted Solution. This small action can make a big difference for others who are looking for the same solution.