Problem with Service Account permissions

[anqa]

Hello All!

I am really glad to join PowerBI users community!

Recently we have been struggling with PowerBI Server Service Acount section. Let's say I have domain\abc account that I configured to run PowerBI service. That is working fine because account is added to local administrators for server.
However when we remove it from that group and add it only to SeServiceLogonRight, service is up but I receive error about database connectivity. domain\abc is also used to connect to DB, which is hosted on external server. When we add domain\abc back to Administrators and restart PBI service all is working perfectly fine so I suppose this is not something on remote DB side.
In all articles I saw we only need SSRS to run with SeServiceLogonRight, but seems like service istelf needs something more.

I have no clue how to proceed with that as my company policy does not allow any local administrator accounts. All hints are appreciated!

Kind regards,
Anna

[GilbertQ]

Hi @anqa 

Just to clarify is this for running Power BI Report Server and configuration of the Power BI Service?

[anqa]

Hi @GilbertQ !

Yes, we are running PowerBI Server on our premises. By service account I mean this section from screen below, but instead of using built-in account we are going with domain\abc.

Only when we add domain\abc to Administrators in snap-in below, we are able to use service:

If we have domain\abc only in SeServiceLogonRight group we are able to restart service, but web server is showing database connection error.

[GilbertQ]

Hi @anqa 

From my understanding if you want the Service account to have access to the database you would  either have to add in the Account "Network Service" or use another Service account which has permissions on the Power BI Report Server and database?

[anqa · Accepted solution]

Hi @GilbertQ !

Problem was resolved by adding domain\abc account into SeBatchLogonRight group (alogn with SeServiceLogonRight). Only then I was able to restore encryption key. PBI log was saying it was unable to validate integrity of encrypted data so that made me thinking into key restore.

Thanks for your answers and hope my solution will help somebody 😊