Forum Discussion

MattSB's avatar
MattSB
Icon for Helper I rankHelper I
2 years ago

On-Premise Gateway - Authenticating a SharePoint Connection with a Service Principal Account

I am hoping someone can point me in the right direction or confirm that what i am trying to do is impossible.

 

Context

We have a business need to intergrate our On-Prem SQL server data with SharePoint List data. The issue I have is the only way to authenticate the connection to the sharepoint site is via an indiviudal users credentials.  Obviously this causes issues if a user leaves the business, an over enthusiastic SP Admin decides to do a cleanse, or their password expires while away on leave.

 

I had hoped to use the Service Principal accounts we already have set up for the connection but it doesn't look like this is supported.

 

Is there a solution that removes the risk associated with the authentication being tied to an indiviudals account?

2 Replies

  • christinepayton's avatar
    christinepayton
    Icon for Most Valuable Professional rankMost Valuable Professional

    I have used a service account, rather than a service principle for this. I've seen posts of people trying the service principle with SP but not seen anyone successful with it - someone please point out if you've seen contrary. 🙂

     

    The service account is just a normal account with a naming convention, SharePoint and PBI license, and access to the data sources you need to refresh. You take over the semantic model with the account and schedule it - this doesn't interfere with publishing updates, you can republish with your normal account. 

    • MattSB's avatar
      MattSB
      Icon for Helper I rankHelper I

      I expected as much, was hoping to avoid the additional licencing costs. I might just make a power platform service account so i can use the same account across the platform . I don't suppose you know the minimum windows licence you can get away with, I'd like to use an F3 if possible.