Forum Discussion

uzuntasgokberk's avatar
uzuntasgokberk
Super User
4 months ago
Solved

Power BI SSAS Connection Issue on Azure VM Gateway

Hello everyone,   I have an on-premises server, and I purchased an Azure VM because my SSAS is currently hosted on-premises and I want to migrate it to Azure. I have already completed the migrati...
Need Help
  • v-dineshya's avatar
    v-dineshya
    4 months ago

    Hi uzuntasgokberk ,

    Thank you for reaching out to the Microsoft Community Forum.

     

    Hi Poojara_D12  and lbendlin , Thank you for your prompt responses.

     

    Hi uzuntasgokberk ,  please try the below things to fix the issue.

    1. Could you please confirm whether your SSAS Mode is SSAS Multidimensional / Tabular (Windows Auth), SSAS Tabular (Mixed / Basic) or Azure Analysis Services, it will help us to fix the issue.

    Note: If you are using Windows Authentication, everything that follows must be correct.

    2. Please follow Authentication Flow, When Power BI Service queries SSAS via the gateway, the flow is:

    Power BI Service (user identity) --> On‑premises Data Gateway service account --> (Kerberos delegation) SSAS service account.

    Note: You got the error as “There was a data source access error. Please contact the gateway administrator.” Please check with your Gateway administrator.

    3. Your Gateway must run under a domain user account not Local Machine Account, Local user and Managed Service Account without delegation. Please check on the VM: Services --> On-premises data gateway --> Log On. It should be something like: DOMAIN\PowerBIGatewaySvc

    Note:- If you are using the default NT SERVICE\PBIEgwService, Kerberos cannot work.

    4. Please Eliminate duplicate SPNs, if you haveduplicate SPNs on ANY OTHER ACCOUNT, Kerberos will fail.

    5. In Power BI Service --> Manage Gateways --> SSAS Data Source

    Use Windows Authentication, Enable “Use Single Sign-On (SSO)” and Server name must match SPN.

     

    I hope this information helps. Please do let us know if you have any further queries.

     

    Regards,

    Dinesh

     

  • uzuntasgokberk's avatar
    uzuntasgokberk
    4 months ago

    Hello v-dineshya ,

    Thank you for your response. The issue has been resolved by creating a Local Domain Controller in the machine’s Active Directory. For the gateway and SSAS services, we configured them to use a newly created user from the Local DC instead of the default configuration. This resolved the problem.

    Kind Regards,
    Gökberk Uzuntaş

    🔗 Stay Connected:
    📘 Medium |
    📺 YouTube |
    💼 LinkedIn |
    📷 Instagram |
    🐦 X |
    👽 Reddit |
    🌐 Website |
    🎵 TikTok |

v-dineshya's avatar
v-dineshya
Community Support
4 months ago

Hi uzuntasgokberk ,

Thank you for reaching out to the Microsoft Community Forum.

 

Hi Poojara_D12  and lbendlin , Thank you for your prompt responses.

 

Hi uzuntasgokberk ,  please try the below things to fix the issue.

1. Could you please confirm whether your SSAS Mode is SSAS Multidimensional / Tabular (Windows Auth), SSAS Tabular (Mixed / Basic) or Azure Analysis Services, it will help us to fix the issue.

Note: If you are using Windows Authentication, everything that follows must be correct.

2. Please follow Authentication Flow, When Power BI Service queries SSAS via the gateway, the flow is:

Power BI Service (user identity) --> On‑premises Data Gateway service account --> (Kerberos delegation) SSAS service account.

Note: You got the error as “There was a data source access error. Please contact the gateway administrator.” Please check with your Gateway administrator.

3. Your Gateway must run under a domain user account not Local Machine Account, Local user and Managed Service Account without delegation. Please check on the VM: Services --> On-premises data gateway --> Log On. It should be something like: DOMAIN\PowerBIGatewaySvc

Note:- If you are using the default NT SERVICE\PBIEgwService, Kerberos cannot work.

4. Please Eliminate duplicate SPNs, if you haveduplicate SPNs on ANY OTHER ACCOUNT, Kerberos will fail.

5. In Power BI Service --> Manage Gateways --> SSAS Data Source

Use Windows Authentication, Enable “Use Single Sign-On (SSO)” and Server name must match SPN.

 

I hope this information helps. Please do let us know if you have any further queries.

 

Regards,

Dinesh

 

uzuntasgokberk's avatar
uzuntasgokberk
Super User
4 months ago

Hello v-dineshya ,

Thank you for your response. The issue has been resolved by creating a Local Domain Controller in the machine’s Active Directory. For the gateway and SSAS services, we configured them to use a newly created user from the Local DC instead of the default configuration. This resolved the problem.

Kind Regards,
Gökberk Uzuntaş

🔗 Stay Connected:
📘 Medium |
📺 YouTube |
💼 LinkedIn |
📷 Instagram |
🐦 X |
👽 Reddit |
🌐 Website |
🎵 TikTok |