Forum Discussion

segato's avatar
segato
Icon for Helper I rankHelper I
5 years ago
Solved

Service account - license

As we dont want our reports to stop working everytime password expires or the owner of the report leaves the company we are considering to create a service account. But is it OK to do that as multipl...
Need Help
  • AbhiSSRS's avatar
    AbhiSSRS
    5 years ago

    The individual sign in is different from datasource access. So you should always have that running under a service account. The acces to reports is given based on User Groups/ Roles and the report runs on a seperate account. The user sign-in would be individual ID based and give him access to the reports only .The Data Source should always be hidden from the user and be running with confidential credentials of a service account.

deerkann's avatar
deerkann
Frequent Visitor
1 year ago

Hi! For data sources refreshes that accept Service Principal /Entra ID, you can use Workspace Identity. https://learn.microsoft.com/en-us/fabric/security/workspace-identity

Having a team sign in as the same user named Service Account is really not the best since it violates the license terms, and such "user's" password will still expire and will need to be reset, disabling the password reset / multi factor authentication creates security problems as well.