Forum Discussion
Power BI SSAS Connection Issue on Azure VM Gateway
Hi uzuntasgokberk ,
Thank you for reaching out to the Microsoft Community Forum.
Hi Poojara_D12 and lbendlin , Thank you for your prompt responses.
Hi uzuntasgokberk , please try the below things to fix the issue.
1. Could you please confirm whether your SSAS Mode is SSAS Multidimensional / Tabular (Windows Auth), SSAS Tabular (Mixed / Basic) or Azure Analysis Services, it will help us to fix the issue.
Note: If you are using Windows Authentication, everything that follows must be correct.
2. Please follow Authentication Flow, When Power BI Service queries SSAS via the gateway, the flow is:
Power BI Service (user identity) --> On‑premises Data Gateway service account --> (Kerberos delegation) SSAS service account.
Note: You got the error as “There was a data source access error. Please contact the gateway administrator.” Please check with your Gateway administrator.
3. Your Gateway must run under a domain user account not Local Machine Account, Local user and Managed Service Account without delegation. Please check on the VM: Services --> On-premises data gateway --> Log On. It should be something like: DOMAIN\PowerBIGatewaySvc
Note:- If you are using the default NT SERVICE\PBIEgwService, Kerberos cannot work.
4. Please Eliminate duplicate SPNs, if you haveduplicate SPNs on ANY OTHER ACCOUNT, Kerberos will fail.
5. In Power BI Service --> Manage Gateways --> SSAS Data Source
Use Windows Authentication, Enable “Use Single Sign-On (SSO)” and Server name must match SPN.
I hope this information helps. Please do let us know if you have any further queries.
Regards,
Dinesh
Hello v-dineshya ,
Thank you for your response. The issue has been resolved by creating a Local Domain Controller in the machine’s Active Directory. For the gateway and SSAS services, we configured them to use a newly created user from the Local DC instead of the default configuration. This resolved the problem.
Kind Regards,
Gökberk Uzuntaş
🔗 Stay Connected:
📘 Medium |
📺 YouTube |
💼 LinkedIn |
📷 Instagram |
🐦 X |
👽 Reddit |
🌐 Website |
🎵 TikTok |
This issue is almost certainly related to authentication and identity delegation, not the gateway installation itself. When your report connects to SQL, it works because SQL connections via the gateway can use stored credentials, but SQL Server Analysis Services typically relies on Windows/Entra identity (SSO), and that’s where things break after moving to an Azure VM. Even though your gateway is on the same VM, the Power BI Service cannot automatically pass the user identity to SSAS unless Kerberos delegation (for on-prem AD) or proper Entra ID configuration is set up. If your SSAS instance is still using Windows authentication and the VM is not correctly domain-joined or delegation is not configured, the gateway will fail with a generic “data source access error.” You need to verify that (1) the Azure VM is properly joined to the domain, (2) the gateway service account has “Trusted for Delegation” enabled in Active Directory, and (3) SPNs are correctly registered for SSAS. Alternatively, if you want to avoid Kerberos complexity, configure the SSAS data source in the gateway to use stored credentials instead of SSO, but then all users will access data under a single identity. In short, nothing is wrong with Power BI—this is a classic SSAS + gateway + identity delegation misconfiguration after moving to Azure.
We are attempting to resolve this issue without relying on an Entra ID-based solution, focusing instead on points (1) and (2) above. For point (3), I have tried executing the relevant PowerShell command to register the SPNs, but unfortunately it did not resolve the issue.
Could you kindly advise on the next steps I should take, or share any additional troubleshooting recommendations based on your experience?
Thank you very much in advance for your time and support.
Best regards,
Gökberk Uzuntaş
Hi uzuntasgokberk ,
Thank you for reaching out to the Microsoft Community Forum.
Hi Poojara_D12 and lbendlin , Thank you for your prompt responses.
Hi uzuntasgokberk , please try the below things to fix the issue.
1. Could you please confirm whether your SSAS Mode is SSAS Multidimensional / Tabular (Windows Auth), SSAS Tabular (Mixed / Basic) or Azure Analysis Services, it will help us to fix the issue.
Note: If you are using Windows Authentication, everything that follows must be correct.
2. Please follow Authentication Flow, When Power BI Service queries SSAS via the gateway, the flow is:
Power BI Service (user identity) --> On‑premises Data Gateway service account --> (Kerberos delegation) SSAS service account.
Note: You got the error as “There was a data source access error. Please contact the gateway administrator.” Please check with your Gateway administrator.
3. Your Gateway must run under a domain user account not Local Machine Account, Local user and Managed Service Account without delegation. Please check on the VM: Services --> On-premises data gateway --> Log On. It should be something like: DOMAIN\PowerBIGatewaySvc
Note:- If you are using the default NT SERVICE\PBIEgwService, Kerberos cannot work.
4. Please Eliminate duplicate SPNs, if you haveduplicate SPNs on ANY OTHER ACCOUNT, Kerberos will fail.
5. In Power BI Service --> Manage Gateways --> SSAS Data Source
Use Windows Authentication, Enable “Use Single Sign-On (SSO)” and Server name must match SPN.
I hope this information helps. Please do let us know if you have any further queries.
Regards,
Dinesh
Hello v-dineshya ,
Thank you for your response. The issue has been resolved by creating a Local Domain Controller in the machine’s Active Directory. For the gateway and SSAS services, we configured them to use a newly created user from the Local DC instead of the default configuration. This resolved the problem.
Kind Regards,
Gökberk Uzuntaş
🔗 Stay Connected:
📘 Medium |
📺 YouTube |
💼 LinkedIn |
📷 Instagram |
🐦 X |
👽 Reddit |
🌐 Website |
🎵 TikTok |