403 GraphQL API

Hi harsh_chandra​ 

The error “The current user is not authorized to execute this operation” points to an authorization issue, but doesn’t identify which permission is missing. Enabling the tenant setting allows the service principal to use Fabric APIs; it does not grant access to a specific GraphQL API.

Please check these permissions and settings:

1. Tenant setting: Ask your Fabric admin to enable Service principals can use Fabric APIs under Fabric admin portal → Tenant settings → Developer settings. If the setting is scoped to a security group, confirm your service principal is included.
2. GraphQL API permission: In the GraphQL API item’s Manage permissions, grant the service principal Run Queries and Mutations.
3. Underlying data access: Check the API’s connection mode. With SSO, the service principal needs appropriate access to the underlying data source. With saved credentials, the identity used by the saved connection needs that access. The service principal still needs Execute permission on the GraphQL API.
4. Token and endpoint: The endpoint format you provided is consistent with the GraphQL API endpoint; use the URL copied from the API item. For client-credentials authentication, the documented scope is https://api.fabric.microsoft.com/.default. Delegated GraphQLApi.Execute.All permissions are for user-delegated access, not app-only client-credentials authentication.

If it still fails, please share the connection mode and sanitized HTTP status/response details. Please don’t share the access token or client secret.

References:

• Use service principals with Fabric API for GraphQL
• Connect applications to Fabric API for GraphQL

Thank you.