I have certain reports that auto refresh at some specific time. I have used my corporate ID and using that ID, I have install Power BI Gateway for refreshing on-premise data. I have then configured my reports using the gateway that I have installed on my Windows Server.
Now, we have setup a new SA account that has its own Corporate email address, power BI pro license and its own username/password. Now I want my reports to use the SA account for setting up Gateway as well as reports will be refreshed using SA Accounts' Gateway setting.
What changes I need to make? The server where both the gateways are installed is a common single server.
Steps that I have taken so far:
Sign in with SA Acccount in the Gateway installer
Enter recovery key in the Gateway installer
Gateway is installed succesfully using SA's account corporate email ID and password
Thanks!
Refresh can be configured via API, using the
POST https://api.powerbi.com/v1.0/myorg/groups/{group_id}/datasets/{dataset_id}/refreshes
REST call.
See this for more info:
https://powerbi.microsoft.com/en-us/blog/announcing-data-refresh-apis-in-the-power-bi-service/
Related
Inside Azure, am doing all authentication to my Azure SQL database over Managed identity.
However, by authenticating PowerBI on Azure SQL database, there are only "Organization Account" and "Basic Authentication". How can i make the authentication from PowerBI on AzureSQL over Azure AD in order to be safe against theft (e.g. Managed Identity...)?
When using an Organization Account Power BI never sees your password. Power BI gets and stores an Access Token and a Refresh Token from AAD.
Furthermore, if you are using a Gateway any credentials are encrypted with the Gateway's public key, and can only be decrypted by the Gateway, which is a server you control.
In the future Power BI may add managed identity auth, but the current options are not insecure, just sometimes inconvenient.
Also you can run a script to update the Access Token for a data source using an access token generated for a Service Prinicpal or Managed Identity, but you have to run the script on a schedule so the Access Token doesn't expire, which I think is like 55min.
And for Azure SQL you can force SSO so the end user's identity is used to access the database, not the identity configured in the data source.
I have configured AWS single account access Enterprise application from Azure AD gallery and added Azure AD as identity provider in AWS side.
I am able to test the enterprise application from https://portal.azure.com/ and SSO is happening properly to AWS.
I want to perform the same thing using java, so that I can get authenticated to Azure AD and should able to retrieve the SAML assertion which can be later used for further actions.
So I am stuck at point of getting authenticated programmatically. Help would be appreciated
I configured HTTP Endpoints for Analysis services tabular instance (SQL Server 2017) on IIS 10 in Windows server 2019 and I am able to connect this tabular instance on local machine by using HTTP endpoints. I also created some Power BI reports and it is also working fine with HTTP endpoints in Power BI Desktop.
But when I deployed these reports on Power BI service and try to run then it shows following error message:
"The connection to Analysis Service instance timed out or was lost. Ensure that the server and 'SQL Browser' Service are running."
I tried to access HTTP endpoints after disabling Firewall also, but getting same error on Power BI service and in remote access.
The machine on which SSAS tabular instance installed is not in domain, and I am trying to connect it from other domain remotely/using Power Bi Service.
Please refer following link:
Analysis services with PowerBI
Is this the root cause of issue?
Note: SQL Server Browser service is also running on Machine.
Please let me know if I missed something.
Thanks in Advance.
Hemant
AS per Anand in following link:
Analysis services with PowerBI
Possible solutions are:
1) Use Active Directory
You can create separate AD environment for your SSAS server. It doesn't have to be the same AD domain that is synced with Azure AD tenant that you use for logging into Power BI Service. It just has to be AD. Then you can install On-premise Data Gateway directly on this SSAS server and add it to your Power BI Service environment. Then you have to add SSAS connection for this gateway and map Power BI users to SSAS AD users. Then the scheduled refresh functionality should work through this On-premise Data Gateway in import mode. I'm not entirely sure about DirectQuery.
2) Query proxy (only for MDX queries)
If your usage scenario needs only some data from your SSAS instance, maybe it will be possible to get the data by using MDX queries. If that's the case, then you can deploy and use my simple SSAS query proxy application written in ASP.NET.
So do I need to use Active Directory for the same? Please confirm.
Hemant
We have setup WSO2 API-M v2.1.0 with API-M Analytics v2.1.0 with Postgresql and HAProxy on CentOS. The API analytics reports are being shown as expected from the Publisher and the Store side and even the api availability from the Admin Portal.
This is a distributed set-up comprising separate publisher, store, key manager, traffic manager, gateway manager/worker and analytics. Consul service discovery is providing local DNS resolution.
On the gateway worker we have enabled log analyzer; also HAProxy is forwarding /portal and /shindig to the Admin Portal publisher node.
Also note the publisher was started on its api-publisher product profile, however this resulted in missing alert configurations, see
jira issue.
This is easily resolved by reverting to the default profile; still none of the log analyzer links are being populated when logged into the Admin Portal application.
When attempting any of the Log analyzer links from the Admin Portal the browsers javascript console is displaying the following errors :
"Failed to preload gadget https://<HOSTNAME>/portal/store/carbon.super/fs/gadget/LiveLogViewer/index.xml."
and
"Detailed error: 503 Unable to retrieve spec for https://<HOSTNAME>/portal/store/carbon.super/fs/gadget/LiveLogViewer/index.xml. HTTP error 503"
From the analytics carbon console I can validate my gateway log analzyer configuration from the data explorer seen here
The docs seem to suggest the need to edit js code for the log analyzer??
I uninstalled my Power BI Enterprise gateway because I want to install a new gateway to work with a demo Office365 E5 account.
But when I reinstall the gateway, the installation wizard forwards me automatically to my work account instead.
Does anyone know how I can choose the account for which I want to configure the gateway?
Thanks!
Hi when you are installing you will get a option (See point 4) to choose New gateway or migrate,restore takeover option. Choose New gateway option and enter email.