On-Prem Gateway - Seperate Report creators and Gateway User

[NovaBI]

Hi all,

following situation:

I have a datawarehouse that will cover 80% of all reports, and so the datasets.

As i do not have all of the user's credentials for accessing the business warehouse (and i dont want to maintain numerous gateways for different people...), I have created a generic (read-only) user that i put into the gateway under Data Source Settings.

So when a pro-user adds a report and the gateway points to that report, it is refreshed. So far, so good. With every possbible query combination.

From my point of view, the user should not be able to use the gateway's account to access all queries that are accessible via the gateway "god"-user account, or am I wrong?

There should not be any way of abusing the gateway user.

[Tutu_in_YYC]

Hi NovaBI,
Sounds like you created a "service account" to handle queries to the database and can be used by any users that have access to that gateway. 

As far as I know, users cant see the queries being used by other reports, but they do have access to the data to that queries. 

[NovaBI]

HI @Tutu_in_YYC ,

its would be okay if they see other queries beeing used. It is just about the access. They must not access all queries the service account has access to.

[Tutu_in_YYC · Accepted solution]

To my knowledge, other Pro-users will not see nor have access to the other queries. As the queries are stored in the dataset of the report, not in Gateway.

In this case, Gateway is functioning as a credential repository and the service account is just being used to authenticate connection to the data source.