Problem with on-premise data gateway connection via proxy to onpremise SSAS

[YingB]

We cant authenticate for Power BI service dataset with onprem SSAS using the Onprem Gateway

• Connection status is OK, no errors
  dataset looks refreshed, but no data in report
• The SSAS is responding
• The same gateway and proxy works with the same server/user for SQL server connection
  we have tried  different users/account, all being SSAS Server admin/Admin for the Cube
• If I use “wrong” user or pwd I get an error already in Local connection, but not it this case, so seems like authentication works.

In gateway logs we have this: “<ccon>The following system error occurred:  The user name or password is incorrect. </ccon>”
In SSMS ssasprofile tracing we have this: user is domain user (matching with email-adress login powerbi service) which has right to full acess to the tabular and also administrator for the ssas instance.

I will try with latest version of Gateway, currently its last months, and also check on Gateway server if I can connect with Power BI Desktop. Then I’m out of ideas.
It seems we have a connection/authentication but no authorization

Can someone help us walk out this problem. we appreciate IT.

[TomMartens]

Hey @YingB ,

please check this article: https://learn.microsoft.com/en-us/power-bi/connect-data/service-gateway-enterprise-manage-ssas?WT.mc...
Mapping of accounts is required. You authenticate to the Power BI Service with an account that looks like someone@someplace.com but authorization to SSAS requires a domain acccount that looks like this: domain\account

I always recommend using the Active Directory Lookup Mapping method, even if it requires some "tweaking" of a configuratio file.

Regards,

Tom

[YingB]

Hej, @TomMartens 

Yes, my Power BI Service with an account that looks like someone@someplace.com and is matched  my domain domain\account.

[TomMartens]

Hey @YingB ,

from your answer, I do not understand how you map the Power BI Service authentication account to the domain\account. This mapping must be configured per the article I posted above. The screenshots you provided does not show how you configured this mapping either inside the Power BI Service or by adapting one of the on-premises gateway configuration files.

Regards,

Tom

[GilbertQ]

Thanks, so does it work when you try and render a report?

[YingB]

Yes, it worked fine when I try to render my report. 

But when I tried open my report from powerbi service website. it showed error below:

At same time I opened tracing in sqlserver profile  for ssas, it showed error as below:

When I opened gateway errorlog file, it showed as below:

When I created a powerbi report which is connected to sqlserver database and render it, it works fine. and I can open the report in powerbi service and refresh data without any issue.  Same onpremise gateway and proxy, data in the same server as ssas. 

[YingB]

Hi, @GilbertQ 

Yes, I can confirm that the domain\useraccount I have configured in the gateway can successfully log into the SSAS Server and this account also has admin right on the ssas server

[GilbertQ]

Hi @YingB 

Can you confirm that the domain\useraccount you have configured in the gateway can successfully log into the SSAS Server? And that this account also has Admin rights on the SSAS Server?