This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 9%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
We are using azure automation account to refresh our cubes but when we view the query sessions we see the queries using our login id's in the database. We want to use the service principal account to refresh the cube via azure automation account. Is there a way to override the credentials used to publish the cubes using power shell commands or scripts or do we have to do this manually by publishing the cube with the service principal account? Also, do we need to create a database login for the service principal account so it can be used to process and publish the cube?
We are using this command in our daily refresh runbook -
Invoke-ProcessASDatabase -DatabaseName
Hey,
Can you please clarify your ask?
Is it to leverage service principal to establish the connection with the Azure SQL database within AAS?
Can you provide the screenshot of the current connection(scrubbing sensitive data)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(51.2, 81%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPV%3C/text%3E%3C/svg%3E)
Hello Nandan,
A part of this is similar to what you mentioned. We do need to know whether we need to create a login for service principal within the AAS database or only giving the contributor access to the resource should be sufficient.
Also, we want to know whether there is a via scripting to override the existing login details in the cube in Azure with the help of runbooks. We are currently publishing the cube using our credentials via visual studio.
Hey
For any deployment/updates over AAS, we need to provide admin access on server to a service principal
You can update the datasource details by executing TMSL scripts on the basis of powershell
https://learn.microsoft.com/en-us/powershell/module/sqlserver/invoke-ascmd?view=sqlserver-ps
Hi,
Thanks for the answer. Yes sure we will do the same.
Let us go through the link and we will revert if this solution works for us.
Hi Nandan,
We are using the same logic as mentioned in below link. Our Analysis service db is using the service principal for authentication but the source db from which we have pulled data into our cubes which we have authenticated using our own account when working with the cubes in visual studio code.
https://learn.microsoft.com/en-us/azure/analysis-services/analysis-services-refresh-azure-automation
Now when we check the session queries in the source db for every cube refresh it is showing sessions running using our id. We want to change this credential with a service principal with the help of powershell script for automating this authentication.
Any idea how to change the source authentication.
We are also attaching a screenshot of our BIM file which also shows we are using service principal connection for datasource but still the queries in source db are running using our id. The reason is when we authenticate the cube in visual studio we are using our microsoft account credentials.
Can we change credentials in visual studio also to authenticate source db using Service Principal ?
To change our source credentials and then refresh successfully do we have to first run "Invoke-ASCmd" and then run
Invoke-ProcessASDatabase -DatabaseName $Par1 ( our analysis service cube db) -RefreshType $Par2 -Server $Par3 ( our analysis server ) -Credential $_Cred1 -ServicePrincipal
Refresh BIM File :
{
"name": "zzzzz",
"compatibilityLevel": 1500,
"model": {
"culture": "en-US",
"dataSources": [
{
"type": "structured",
"name": "zzzzzzzzzzz",
"connectionDetails": {
"protocol": "tds",
"address": {
"server": "zzzzzzzzz",
"database": "zzzzzzzzz"
},
"authentication": null,
"query": null
},
"options": {},
"credential": {
"AuthenticationKind": "UsernamePassword",
"Username": "ServicePrincipalAccount",
"EncryptConnection": true,
"PrivacySetting": "Organizational"
}
}