Forum Discussion
Power BI On‑Premises Data Gateway on a Windows Server without being prompted for an admin password?
- Anonymous6 months ago
Hi Ad_Khattak ,
The Power BI On Premises Data Gateway operates as a Windows service rather than a standard desktop application. The configuration tool (GatewayConfigurator.exe) intentionally requires local administrator rights, as it manages service settings, credentials, and encryption keys. Once the gateway is initially set up and registered, it does not need to be reopened for routine operation. To ensure continuous operation, the gateway service should be set to start automatically and run under a dedicated domain service account, eliminating the need for an administrator to log in each time.If the BI team needs to restart the gateway, the recommended and secure method is to delegate Start, Stop, and Read permissions specifically for the On-premises data gateway service using Group Policy. This approach enables standard users to control the service without granting full local administrator access. For troubleshooting, you can also assign the BI security group read access to the gateway log folders, allowing them to collect logs without using the configuration tool. Changes to credentials, recovery keys, or gateway registration will still require administrator privileges, in line with Microsoft’s security guidelines.
For reference, please refer these Microsoft documentations :
https://learn.microsoft.com/power-bi/connect-data/service-gateway-onprem
https://learn.microsoft.com/power-bi/connect-data/service-gateway-install
https://learn.microsoft.com/windows-server/administration/windows-commands/sc-sdset
Hi Ad_Khattak ,
The Power BI On Premises Data Gateway operates as a Windows service rather than a standard desktop application. The configuration tool (GatewayConfigurator.exe) intentionally requires local administrator rights, as it manages service settings, credentials, and encryption keys. Once the gateway is initially set up and registered, it does not need to be reopened for routine operation. To ensure continuous operation, the gateway service should be set to start automatically and run under a dedicated domain service account, eliminating the need for an administrator to log in each time.
If the BI team needs to restart the gateway, the recommended and secure method is to delegate Start, Stop, and Read permissions specifically for the On-premises data gateway service using Group Policy. This approach enables standard users to control the service without granting full local administrator access. For troubleshooting, you can also assign the BI security group read access to the gateway log folders, allowing them to collect logs without using the configuration tool. Changes to credentials, recovery keys, or gateway registration will still require administrator privileges, in line with Microsoft’s security guidelines.
For reference, please refer these Microsoft documentations :
https://learn.microsoft.com/power-bi/connect-data/service-gateway-onprem
https://learn.microsoft.com/power-bi/connect-data/service-gateway-install
https://learn.microsoft.com/windows-server/administration/windows-commands/sc-sdset
HI Ad_Khattak ,
I hope the above details help you fix the issue. If you still have any questions or need more help, feel free to reach out. We’re always here to support you
- Anonymous6 months agoNot applicable
HI Ad_Khattak ,
I wanted to check if you had the opportunity to review the information provided. Please feel free to contact us if you have any further questions.