topic Re: Unable to create a ADLSg2 shortcut due to authorization denial in Data Engineering

Unable to create a ADLSg2 shortcut due to authorization denial

amaaiia — Wed, 10 Apr 2024 07:03:00 GMT

I'm trying to create a shortcut to a new Storage Account I've recently created. I have a samplecontainer container where I have raw directory and a csv file inside.

I go to my lakehouse>New shortcut>ADLSg2>(I fill the URL with DLS path in Endpoints)>Next(Organizational Account authentication)>(I select samplecontainer>raw)>Next>Create, and I get an authentication error:

I've checked the roles of my user and I think they are right:

What am I missing?

Re: Unable to create a ADLSg2 shortcut due to authorization denial

Anonymous — Wed, 10 Apr 2024 07:06:42 GMT

Hi @amaaiia
Thanks for using Fabric Community.
Can you please confirm if the Fabric Capacity and the ADLS Gen2 container belong to the same region or different one?
Thanks

Re: Unable to create a ADLSg2 shortcut due to authorization denial

amaaiia — Wed, 10 Apr 2024 07:11:34 GMT

Storage Account belongs to westeurope and Fabric capacity to North Europe. Is this a problem?

Re: Unable to create a ADLSg2 shortcut due to authorization denial

Anonymous — Wed, 10 Apr 2024 07:23:25 GMT

Hi @amaaiia
Are you using any Firewall? If yes please check this
https://learn.microsoft.com/en-us/fabric/security/security-trusted-workspace-access#configure-trusted-workspace-access-in-adls-gen2

And please check if the DFS link you provided is pointed to the storage container and not the subfolder.

Re: Unable to create a ADLSg2 shortcut due to authorization denial

amaaiia — Wed, 10 Apr 2024 08:04:08 GMT

1. I'm pointing to the right DFS enpoint

2. I created the container yesterday and I haven't configured any firewall.

Re: Unable to create a ADLSg2 shortcut due to authorization denial

Anonymous — Wed, 10 Apr 2024 08:47:26 GMT

Hi @amaaiia
I tried to repro the same scenario and was unsuccessful while using the authentication as Oraganizational account. Try using the account key as authentication it worked for me.

You can find the Account key in the Access keys tab of the storage container.

Please let me know if the issue still persists. Hope this helps.

Re: Unable to create a ADLSg2 shortcut due to authorization denial

amaaiia — Wed, 10 Apr 2024 09:00:35 GMT

Still same error

Re: Unable to create a ADLSg2 shortcut due to authorization denial

Anonymous — Wed, 10 Apr 2024 09:05:15 GMT

Hi @amaaiia
Are you using the https link with dfs or blob enpoint? Make sure to use this link :
https://StorageAccountName.dfs.core.windows.net
As per the screenshot provided, I think you are using .blob endpoint. Please check this and let me know.

Re: Unable to create a ADLSg2 shortcut due to authorization denial

amaaiia — Wed, 10 Apr 2024 09:31:44 GMT

Yes, when connection is created I use DFS endpoint, I don't know why the error is happening for BLOB endpoint. Let me show you steps:

Re: Unable to create a ADLSg2 shortcut due to authorization denial

Anonymous — Wed, 10 Apr 2024 09:39:59 GMT

Hi @amaaiia
Try to create a new connection.

If the issue still exists try to create a new storage account and check once.

Re: Unable to create a ADLSg2 shortcut due to authorization denial

amaaiia — Wed, 10 Apr 2024 09:55:38 GMT

My fault, I didn't configured the Storage Account to be ADLSg2 type. I didn't enabled Hierarchical namespace. Once enabled, it works.