Forum Discussion

CoulterJames2's avatar
CoulterJames2
Icon for Advocate II rankAdvocate II
2 months ago

Using Key Vault References within Notebooks

I have an Azure Key Vault (AKV) which is in a different Azure tenant from my Fabric capacity. I have created some key vault secrets that I want to reference within a notebook to use for an API call. ...
security
tayloramy's avatar
tayloramy
Icon for Super User rankSuper User
2 months ago

Hi CoulterJames2, 

 

If you go to manage connections and gateways, then under connections find the keyvault connection, the connection type will be Azure Keyvault Service. From there you can get the connection ID. Try calling the GetSecretWithConnection using that ID. 

 

CoulterJames2's avatar
CoulterJames2
Icon for Advocate II rankAdvocate II
2 months ago

Hi tayloramy unfortunately I couldn't get that to work - the connection shows as Offline in the side pane and when I try to run the code to retrieve the credentials it fails.

  • tayloramy's avatar
    tayloramy
    Icon for Super User rankSuper User
    2 months ago

    Hi CoulterJames2, if manually entering the connection ID into the GetSecretWithConnection function doesn't work, then I can only assume that cross tenant key vaults is not supported. 
    I'd recommend to raise a ticket with Microsoft to confirm this. 

    • v-abhinavmu's avatar
      v-abhinavmu
      Icon for Community Support rankCommunity Support
      2 months ago

      Hi CoulterJames2,

      Thanks for reaching out to the Microsoft Fabric Community forum.

       

      Following tayloramy 's suggestion, were you able to raise a Microsoft support ticket? If so, could you please share any updates or findings? It would be helpful to know whether there are any confirmations regarding support for cross-tenant Key Vaults.

       

      Thanks tayloramy  for the suggestion.

      • CoulterJames2's avatar
        CoulterJames2
        Icon for Advocate II rankAdvocate II
        2 months ago

        I don't have the ability to raise support tickets myself so I will reach out to our IT team on this.