Access lakehouse using logic app via Managed Identity

Hi Anonymous,

Thanks for reaching out to the Microsoft fabric community forum.

You're receiving this error because Managed Identity authentication isn't yet fully supported for OneLake REST APIs (i.e., https://onelake.dfs.fabric.microsoft.com) across all Microsoft Fabric tenants particularly through Logic Apps. Although you've granted Contributor access to the Logic App's Managed Identity at the Fabric workspace scope, the OneLake resource principal isn't registered for that identity within AAD and hence the token request fails.

This implies that Logic App's Managed Identity does not have permission to utilize that resource. Your OneLake's resource URL isn't currently capable of issuing tokens for managed identities in your case. 

You are correct in that using a Service Principal with appropriate Graph API and Fabric workspace permissions does indeed work. Until support for Managed Identity is complete, using the service principal is the only consistently reliable option here.

As far as SharePoint create or update behavior in Logic Apps, currently SharePoint's Logic App connector does not have a built-in create or update action in one step, what you're doing is the right and standard approach.

If I misunderstand your needs or you still have problems on it, please feel free to let us know.  

Best Regards,
Hammad.