Skip to main content

Power BI

Needs Votes

GMSA Account for Enterprise Gateway

Vote (37) Share
Francois Huard's profile image

Francois Huard on 07 Apr 2018 01:45:40

When setting up an Entreprise Gateway on PowerBI.com, in the manage gateways, data source setting page.

If I use Windows Authentication, I cannot put a GMSA (Group Managed Service Account) because the password field is required. GMSA account password are generated and maintained by the Key Distribution Service (KDS).

I would like to be able to use this type of account to configure Enterprise Gateway.

Comments (3)
Francois Huard's profile image Profile Picture

on 31 Aug 2021 18:18:01

RE: GMSA Account for Enterprise Gateway

I also have a need for GMSA accounts on the data gateway source.

I opened a MS ticket regarding this and Alan was very helpful in investigating if this was supported. He determined the username and blank password could be set using the rest api but when AD rotates the password, the gateway is not aware and would not be able to handle the change automatically. We discussed the possibility of writing a scheduled script to rotate and subsequently update the password via the rest api, but both agreed this is reinventing the wheel to fill a gap managed service accounts already fill.

By using a managed service account, we can keep our sql access secured with a non-interactive login enabled account and still present the relevant data to each department without granting end users direct access to the database. Even though this idea was opened in 2018, since three of the comments are in the past year, its still a very relevant need.

Francois Huard's profile image Profile Picture

Nathan Nitzel on 18 Jan 2021 18:54:50

RE: GMSA Account for Enterprise Gateway

We would love to see this happen. We understand a GMSA can be used for the Power Bi Gateway Server, but why can't we do the same for it's data source connection authentication?

Francois Huard's profile image Profile Picture

Jordan Mills on 05 Jul 2020 23:36:37

RE: GMSA Account for Enterprise Gateway

Come on, this is basic enterprise stuff. How was this left out?