Francois Huard on 07 Apr 2018 01:45:40
When setting up an Entreprise Gateway on PowerBI.com, in the manage gateways, data source setting page.
If I use Windows Authentication, I cannot put a GMSA (Group Managed Service Account) because the password field is required. GMSA account password are generated and maintained by the Key Distribution Service (KDS).
I would like to be able to use this type of account to configure Enterprise Gateway.
- Comments (3)
RE: GMSA Account for Enterprise Gateway
I also have a need for GMSA accounts on the data gateway source.
I opened a MS ticket regarding this and Alan was very helpful in investigating if this was supported. He determined the username and blank password could be set using the rest api but when AD rotates the password, the gateway is not aware and would not be able to handle the change automatically. We discussed the possibility of writing a scheduled script to rotate and subsequently update the password via the rest api, but both agreed this is reinventing the wheel to fill a gap managed service accounts already fill.
By using a managed service account, we can keep our sql access secured with a non-interactive login enabled account and still present the relevant data to each department without granting end users direct access to the database. Even though this idea was opened in 2018, since three of the comments are in the past year, its still a very relevant need.
RE: GMSA Account for Enterprise Gateway
We would love to see this happen. We understand a GMSA can be used for the Power Bi Gateway Server, but why can't we do the same for it's data source connection authentication?
RE: GMSA Account for Enterprise Gateway
Come on, this is basic enterprise stuff. How was this left out?