cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
anqa
Regular Visitor

Problem with Service Account permissions

Hello All!

I am really glad to join PowerBI users community!

Recently we have been struggling with PowerBI Server Service Acount section. Let's say I have domain\abc account that I configured to run PowerBI service. That is working fine because account is added to local administrators for server.
However when we remove it from that group and add it only to SeServiceLogonRight, service is up but I receive error about database connectivity. domain\abc is also used to connect to DB, which is hosted on external server. When we add domain\abc back to Administrators and restart PBI service all is working perfectly fine so I suppose this is not something on remote DB side.
In all articles I saw we only need SSRS to run with SeServiceLogonRight, but seems like service istelf needs something more.

I have no clue how to proceed with that as my company policy does not allow any local administrator accounts. All hints are appreciated!

Kind regards,
Anna

1 ACCEPTED SOLUTION
anqa
Regular Visitor

Hi @GilbertQ !

Problem was resolved by adding domain\abc account into SeBatchLogonRight group (alogn with SeServiceLogonRight). Only then I was able to restore encryption key. PBI log was saying it was unable to validate integrity of encrypted data so that made me thinking into key restore.

 

Thanks for your answers and hope my solution will help somebody 😊

View solution in original post

4 REPLIES 4
GilbertQ
Super User II
Super User II

Hi @anqa 

 

Just to clarify is this for running Power BI Report Server and configuration of the Power BI Service?





Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

anqa
Regular Visitor

Hi @GilbertQ !

 

Yes, we are running PowerBI Server on our premises. By service account I mean this section from screen below, but instead of using built-in account we are going with domain\abc.

pbireportserver-configure-account

 

Only when we add domain\abc to Administrators in snap-in below, we are able to use service:

1641.local_2D00_user_2D00_group

If we have domain\abc only in SeServiceLogonRight group we are able to restart service, but web server is showing database connection error.

Hi @anqa 

 

From my understanding if you want the Service account to have access to the database you would  either have to add in the Account "Network Service" or use another Service account which has permissions on the Power BI Report Server and database?





Did I answer your question? Mark my post as a solution!

Proud to be a Super User!







Power BI Blog

anqa
Regular Visitor

Hi @GilbertQ !

Problem was resolved by adding domain\abc account into SeBatchLogonRight group (alogn with SeServiceLogonRight). Only then I was able to restore encryption key. PBI log was saying it was unable to validate integrity of encrypted data so that made me thinking into key restore.

 

Thanks for your answers and hope my solution will help somebody 😊

View solution in original post

Helpful resources

Announcements
PBI User Groups

Welcome to the User Group Public Preview

Check out new user group experience and if you are a leader please create your group

April Update

Check it Out!

Click here to read more about the April 2021 Updates!

secondImage

The largest Power BI virtual conference

100+ sessions, 100+ speakers, Product managers, MVPs, and experts. All about Power BI. Attend online or watch the recordings.

secondImage

Experience what’s next for Power BI

See the latest Power BI innovations, updates, and demos from the Microsoft Business Applications Launch Event.

Top Solution Authors
Top Kudoed Authors