Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
1 year ago
Solved

Getting unauthorized issue while executing Notebook from Azure API

Hi,   I have an Azure function , where I would consume Post method to connect and execute Notebook on demand   URI- https://api.fabric.microsoft.com/v1/workspaces/xxxx/items/yyy/jobs/instances?jo...
workspaces
  • Anonymous's avatar
    Anonymous
    1 year ago

    Closing this thread, as the issue is solved. There was a Security Group configured to allow Service principals and after adding the API call is successfull. Thankyou !

Anonymous's avatar
Anonymous
Not applicable
1 year ago

I have given Workspace Admin permission to the PROD SPN and in Azure App registratiion I have below permissions

 

  • v-sathmakuri's avatar
    v-sathmakuri
    Community Support
    1 year ago

    Hi Anonymous ,

     

    Thank you for reaching out to Microsoft Fabric Community.

     

    To enable SPN MI to access Microsoft Fabric APIs, follow these steps. First, go to the Microsoft Fabric Admin Portal, and under Tenant Settings, navigate to Developer Settings, add the PROD SPN App ID to both the “Allow service principals to use APIs” setting and if necessary, “Allow service principals to create and use service principals”.

     

    Ensure your Azure App Registration for the SPN has the required API permissions. Specifically, add and grant admin consent for the following:
    Fabric.Read.All, Fabric.Execute.All, and Fabric.Workspaces.ReadWrite.All. You can manage these permissions within the Azure Portal under App Registrations, Your App, API permissions.

     

    If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it! 

     

    Thanks & Regards,

    Rekha,

    CustomerSupportTeam.

    • Anonymous's avatar
      Anonymous
      Not applicable
      1 year ago

      Hi v-sathmakuri ,

      I dont see, Tenant settings in Microsoft Admin portal . below is the screenshot. Could you let me know if I had to raise acces anywhere else for this options? Also, FYI I had given every permission under App Registration ->SPN-> API permissions.Below is the screenshot

       

       

      Note: This feature is working as expected in UAT environment.Only the problem is with PROD SPN/MI.  Also UAT and PROD workspace are in same tenant.

      • v-sathmakuri's avatar
        v-sathmakuri
        Community Support
        1 year ago

        Hi Anonymous ,

         

        You need Fabric Admin access in order to modify tenant settings.

         

        1. Ask your Microsoft 365 Global Administrator (or someone managing your tenant) to navigate to fabrics admin portal.
        2. Under Tenant settings, Admins, they must add your user account as a Fabric Admin.
        3. Once added, sign out and sign in again, and you should now see Tenant Settings, including Developer Settings.

        Please refer to the below documentation to enable service principal authentication. 

        https://learn.microsoft.com/en-us/fabric/admin/enable-service-principal-admin-apis 

         

        Additionally, ensure that the process is consistent across UAT and PROD, as UAT is working fine.

         

        If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it! 

        Thank You!!