Forum Discussion
Unknown Error when calling the initializeConnection Fabric Git API endpoint with a service principal
With some great help from Microsoft we finally figured out the solution. It was a combination of three items that we had to solve. The first item was in the Fabric Admin Portal. We had to enable the following setttings:
- Service principals can access read-only admin APIs
- Service principals can access admin APIs used for updates
In addition these settings the second item that is required is that you put your service principal into an Entra AD group:
The second thing we had to do was reconfigure our service principal setup in the app registration. In my own troubleshooting I had added several Fabric/PowerBI related API permissions. As mentioned in this document: Embed Power BI content with service principal and an application secret
These permissions are no longer needed once you enable the Fabric API setting and in fact can cause issues. See this callout:
The solution was to remove all of the permissions besides the default one you get when you create an app registration:
After doing these 3 steps we are now able to sync our workspaces with GIT via a service principal inside of GitHub Actions workflow. As a bonus it also supports using federated credentials instead of having to rely on a client secret!
Hi ckingdon_bee ,
Have you had a chance to raise a support ticket and resolve this issue? If so, please consider sharing the solution in the forum and marking it as accepted, this will help other members find the answer more easily.
Thank you!
Hey there,
Yes I have raised a support ticket. Currently it has not been resolved yet and has been escalated as there was no immediate solution I could apply that they could see. I'll update here once I know more.
Hi ckingdon_bee ,
Were you able to resolve the issue? If yes, please consider sharing your solution and marking it as accepted, it could be a great help to others facing a similar challenge
Thank you!!
Hey v-sathmakuri, still waiting on support. I got an update yesterday that they are still testing some stuff so hopefully I'll have an update next week. I'll be sure to post here as soon as I know something useful though!