← All Power BI refresh errors
Permissions
Kerberos delegation error (KRB5KDC_ERR_BADOPTION)
Error code: kerberos-delegation
Power BI dataset refresh error — what it means and how to fix it.
What this means
Kerberos constrained delegation is not configured (the SPN is missing on the gateway service account).
How to fix it
- Add the source SPN to the gateway account's Delegation tab.
- Set the user mapping and add the account to the Windows Authorization Access Group.
- Run the gateway SSO test.
Related permissions errors
Catch this automatically
RefreshRadar monitors every Power BI dataset refresh and alerts you the moment one fails — with the likely cause and the fix — so you never hear about a broken refresh from your stakeholders first.
Start free