Join us at FabCon Atlanta from March 16 - 20, 2026, for the ultimate Fabric, Power BI, AI and SQL community-led event. Save $200 with code FABCOMM.
Register now!The Power BI Data Visualization World Championships is back! It's time to submit your entry. Live now!
Hi there.
We have multiple Power BI reports deployed to our On-Prem Power BI Report Server.
PS! It's a distributed environment....with SSRS on one server, SSAS on another and SQL on another.
Some reports are using SSAS as a data source.... and to get around the Kerberos issue, we use Windows Auth --> hard code a domain user --> and tick the box "Log in using these credentials, but then try to impersonate the user viewing the report". That is working fine for now...for SSAS only.
The problem is that when you are using a SQL data source with a Direct connection.
For some reason you don't get the same tick box "Log in using these credentials, but then try to impersonate the user viewing the report".
We need to be able to see who the user is that is using the report....for security and audit reasons.
Am I missing a setting or a config somewhere?
Or is the only option to use Kerberos with SPNs?
Something that is also very odd.... even on the SQL data source report...when you execute the report, and it fails.... part of the message says: "We couldn't connect to the Analysis Services server....". Is this maybe just a bug or old msg that wasn't updated?
I hope someone can point me in the right direction on how to get a report running...with Windows Auth... in the distributed environment.
I think I have watched all the youtube videos explaining Kerberos and SSAS...but I haven't seen something for SQL data source.
Regards,
Marius
Hi Marius,
I had some fun setting Kerberos authentication up for a SQL data source too, and can relate to your issues!
You should get the "As the user viewing the report" option for Direct Query, are you definately selecting "Windows Auhtentication" from the authentication type drop down?
One "gotcha" which i encountered, when setting the SPNs for MSSQLSvc, you have to use the port number - it did not work without. So the SPNs i created for my service account running SQL were:
I found a guide on configuring Kerberos for SSRS/SQL Server which was really useful and applied to PBIRS:
http://download.microsoft.com/download/B/E/1/BE1AABB3-6ED8-4C3C-AF91-448AB733B1AF/SSRSKerberos.docx
Hope this helps!
The Power BI Data Visualization World Championships is back! It's time to submit your entry.
Check out the January 2026 Power BI update to learn about new features.
| User | Count |
|---|---|
| 3 | |
| 2 | |
| 2 | |
| 1 | |
| 1 |
| User | Count |
|---|---|
| 5 | |
| 3 | |
| 3 | |
| 2 | |
| 1 |