Domain account rights

[Anonymous]

We are using the Power BI Report Server on premise.

I'm looking for some documentation about which rights the service account (domain user) should have for using constrained delegation.

Is it necessary to have set “impersonate a client after authentication”, “log on as a batch job” and “log on as a service”?

[Anonymous]

Thanks for the answer. I also used this link for setting up our server, but that didn't helped. We need more details for setting it up. We just managed to get the single hop. Unfortunately we found no other (deeper) documentation about that.

[d_gosbell]

From memory I don't recall having to specifically set any of those permissions when configuring Kerberos. I pretty much just walked through the following steps with one of our domain admins

https://docs.microsoft.com/en-au/power-bi/report-server/configure-kerberos-powerbi-reports?view=sql-...