Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

The ultimate Microsoft Fabric, Power BI, Azure AI & SQL learning event! Join us in Las Vegas from March 26-28, 2024. Use code MSCUST for a $100 discount. Register Now

Reply
anqa
Regular Visitor

Problem with Service Account permissions

Hello All!

I am really glad to join PowerBI users community!

Recently we have been struggling with PowerBI Server Service Acount section. Let's say I have domain\abc account that I configured to run PowerBI service. That is working fine because account is added to local administrators for server.
However when we remove it from that group and add it only to SeServiceLogonRight, service is up but I receive error about database connectivity. domain\abc is also used to connect to DB, which is hosted on external server. When we add domain\abc back to Administrators and restart PBI service all is working perfectly fine so I suppose this is not something on remote DB side.
In all articles I saw we only need SSRS to run with SeServiceLogonRight, but seems like service istelf needs something more.

I have no clue how to proceed with that as my company policy does not allow any local administrator accounts. All hints are appreciated!

Kind regards,
Anna

1 ACCEPTED SOLUTION

Hi @GilbertQ !

Problem was resolved by adding domain\abc account into SeBatchLogonRight group (alogn with SeServiceLogonRight). Only then I was able to restore encryption key. PBI log was saying it was unable to validate integrity of encrypted data so that made me thinking into key restore.

 

Thanks for your answers and hope my solution will help somebody 😊

View solution in original post

4 REPLIES 4
GilbertQ
Super User
Super User

Hi @anqa 

 

Just to clarify is this for running Power BI Report Server and configuration of the Power BI Service?





Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

Hi @GilbertQ !

 

Yes, we are running PowerBI Server on our premises. By service account I mean this section from screen below, but instead of using built-in account we are going with domain\abc.

pbireportserver-configure-account

 

Only when we add domain\abc to Administrators in snap-in below, we are able to use service:

1641.local_2D00_user_2D00_group

If we have domain\abc only in SeServiceLogonRight group we are able to restart service, but web server is showing database connection error.

Hi @anqa 

 

From my understanding if you want the Service account to have access to the database you would  either have to add in the Account "Network Service" or use another Service account which has permissions on the Power BI Report Server and database?





Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

Hi @GilbertQ !

Problem was resolved by adding domain\abc account into SeBatchLogonRight group (alogn with SeServiceLogonRight). Only then I was able to restore encryption key. PBI log was saying it was unable to validate integrity of encrypted data so that made me thinking into key restore.

 

Thanks for your answers and hope my solution will help somebody 😊

Helpful resources

Announcements
Fabric Community Conference

Microsoft Fabric Community Conference

Join us at our first-ever Microsoft Fabric Community Conference, March 26-28, 2024 in Las Vegas with 100+ sessions by community experts and Microsoft engineering.

February 2024 Update Carousel

Power BI Monthly Update - February 2024

Check out the February 2024 Power BI update to learn about new features.

Fabric Career Hub

Microsoft Fabric Career Hub

Explore career paths and learn resources in Fabric.

Fabric Partner Community

Microsoft Fabric Partner Community

Engage with the Fabric engineering team, hear of product updates, business opportunities, and resources in the Fabric Partner Community.

Top Solution Authors
Top Kudoed Authors