My organization will restrict interactive access for all service accounts

[RichardGAO]

My PBI service(online website) has been running by a service account, and the Gateway (personal mode) was also installed and now is running by the same service account.

Generally, I remotely log on the Gateway server using the service account always, but my organization is planning to restrict interactive access of all service accounts, which means we will not be able to remotely log on servers by any service account in future. Certainly, I can added my individual account as the admin of the server then remoterly log on the server by my individual account, but if need the Gateway(personal mode) to register/associate with datasets, I have to *INSTALL* the Gateway using the service account, which seemsingly violates the restriction of interactive access of service account. Do I have any workaround? Thanks!  

[v-jiascu-msft]

Hi @RichardGAO,

As far as I know, installing a personal Gateway doesn't need a special Service account. We need to make sure the Gateway has access to the dataset. Please refer to: #download-and-install-a-gateway and #windows-account.

>>>

The gateway needs to have access to the data source. If your personal machine cannot connect to the data source, you may want to consider installing an On-premises Data Gateway on a machine that does have access to the data source. An example of this would be SQL Server installed on an virtual machine (VM) hosted in Azure. You personal machine may not have access to the VM. You could install the On-Premises Data Gateway on the VM instead, and configure the a data source within the Power BI service.

Best Regards!

Dale

[RichardGAO]

I have to say your answer does not match my question at all.

I am using personal gateway in an enterprise usage because MSFT's enterprise gateway does't not support online data which my PBI is using. So we have to use personal edition.   

I never said installing a personal Gateway need a special Service account, and just as an enterprise usage, we should not use a individual account. Besides, my team's PBI service is hosting by a service account, whcih must be used to install the personal gateway, else the gateway cannot be registered in my PBI service at all. And of course, my gateway has access to my data sources.  

I have answered your questions, and let us discuss my questions: 

My PBI service(online website) has been running by a service account, and the Gateway (personal mode) was also installed and now is running by the same service account. I have explained why use a personal edition and why we need using service account instead of an individual account. 

Generally, I remotely log on the Gateway server using the service account always, but my organization is planning to restrict interactive access of all service accounts, which means we will not be able to remotely log on servers by any service account in future. Certainly, I can added my individual account as the admin of the server then remoterly log on the server by my individual account, but if need the Gateway(personal mode) to register/associate with datasets, I have to *INSTALL* the Gateway using the service account, which seemsingly violates the restriction of interactive access of service account. Do I have any workaround? Thanks!