Forum Discussion

Subin's avatar
Subin
Frequent Visitor
1 month ago

Microsoft Fabric with GitHub

Hi Community,   We are trying to integrate Microsoft Fabric with GitHub, but we are encountering the error shown below. We have already completed the required configuration, including: Enabling...
data engineering
Subin's avatar
Subin
Frequent Visitor
1 month ago

Prince0011 sannavajjala BrandonHart tayloramy 

 


Environment

  • GitHub Enterprise (Shared Server) – Per User Monthly Subscription
  • Our corporate GitHub organization is protected by IP restrictions.
  • The corporate repository is not accessible outside our company network.

Issue

When attempting to connect Microsoft Fabric Workspace to our corporate GitHub repository, Fabric returns the following error  "Invalid credentials or insufficient permissions "

I have already verified that the GitHub account has the required repository permissions.

 

Workarounds Already Tried

1. Personal Access Token (Classic)

  • Created a Classic PAT.
  • Assigned the required permissions to the corporate GitHub organization.
  • Used the token in Microsoft Fabric.
  • Result: Same "Invalid credentials or permissions" error.

2. Fine-Grained Personal Access Token

  • Created a Fine-Grained PAT.
  • Granted access to the required repositories.
  • Organization administrator approved the token.
  • Used the approved token in Microsoft Fabric.
  • Result: Same "Invalid credentials or permissions" error.

3. Separate GitHub Organization (Without IP Restrictions)

  • Created a separate GitHub organization with no IP restrictions.
  • Used the same type of PAT to connect Microsoft Fabric.
  • Result: Connection was established successfully.

This strongly suggests that the issue is related to the IP restrictions configured on our corporate GitHub organization, rather than the PAT permissions or repository access.

Additional Information

I found Microsoft's published list of Microsoft Fabric IP addresses:

https://www.microsoft.com/en-us/download/details.aspx?id=56519

However, this approach raises a few concerns:

  • The IP list is very large.
  • The addresses can change over time.
  • Allowlisting all Microsoft Fabric IP addresses is not considered a secure option in our organization.
  • Our company security policy requires strict IP restrictions, so removing or bypassing them is not an option.

Questions

  1. Has anyone successfully integrated Microsoft Fabric with a GitHub Enterprise organization that enforces IP restrictions?
  2. Does Microsoft Fabric support using a static outbound IP, private IP, or Private Link for Git integration?
  3. Is there any recommended architecture or workaround that allows Fabric to authenticate with GitHub while keeping corporate IP restrictions in place?
  4. Are there any Microsoft best practices for organizations with strict network security policies when using Fabric Git integration?

Any suggestions or experiences would be greatly appreciated.

 

Thank you!