Fabric Data Agent + MAF + SSO + OBO Setup Issues

Hi lakshya-geek ,
Thanks for reaching out to the Microsoft Fabric Community forum.

At the moment, there isn’t a straightforward way to propagate the end-user identity to a Fabric Data Agent using an OBO flow when it is invoked from a pro-code MAF agent. As a result, theFabric Data Agent uses a Microsoft-managed Azure OpenAI Assistant and handles authentication for you.

As a practical approach, you can grant the service principal used by the bot/application access to the Fabric workspace, which allows the Data Agent to execute successfully. If user-level data isolation is required, one option is to enforce it at the semantic model layer using Row-Level Security (RLS) or a similar authorization mechanism, while the agent continues to operate under the application identity.

Reference: Create a Fabric data agent (preview) - Microsoft Fabric | Microsoft Learn

I hope this information helps. Please do let us know if you have any further queries.
Thank you