Forum Discussion
Power BI On‑Premises Data Gateway on a Windows Server without being prompted for an admin password?
Hi Ad_Khattak ,
The Power BI On Premises Data Gateway operates as a Windows service rather than a standard desktop application. The configuration tool (GatewayConfigurator.exe) intentionally requires local administrator rights, as it manages service settings, credentials, and encryption keys. Once the gateway is initially set up and registered, it does not need to be reopened for routine operation. To ensure continuous operation, the gateway service should be set to start automatically and run under a dedicated domain service account, eliminating the need for an administrator to log in each time.If the BI team needs to restart the gateway, the recommended and secure method is to delegate Start, Stop, and Read permissions specifically for the On-premises data gateway service using Group Policy. This approach enables standard users to control the service without granting full local administrator access. For troubleshooting, you can also assign the BI security group read access to the gateway log folders, allowing them to collect logs without using the configuration tool. Changes to credentials, recovery keys, or gateway registration will still require administrator privileges, in line with Microsoft’s security guidelines.
For reference, please refer these Microsoft documentations :
https://learn.microsoft.com/power-bi/connect-data/service-gateway-onprem
https://learn.microsoft.com/power-bi/connect-data/service-gateway-install
https://learn.microsoft.com/windows-server/administration/windows-commands/sc-sdset
Super UserHi. This is kind of confusing. Just to be clear. There are two type of gateway, the standard/enterprise and the Personal one. I guess you’re talking about the On-premises data gateway (standard mode). The key thing to understand is:
The gateway is a Windows Service, not a normal desktop application. So if users are being prompted for admin credentials, it usually means they’re trying to launch the configuration of gateway app, not just run the service.
If I remember correctly, the gateway configuration UI requires: local administrator permissions, rights to modify windows services, ability to update credentials and encryption keys. Standard users cannot do this and Microsoft intentionally enforces it.
Maybe your Gateway Service isn’t set to start automatically. I would recommend to change that. That way the gateway service should always run automatically without the need of login unless you want to change an specific configuration.
So the idea is to install the service, use AD login of the standard gateway admin to login only once. Then that account can add admins at Power Bi Service for data sources configurations. You shouldn't be asked to login again if you do it that way.
I hope that make sense