topic Re: Anyone know of an alternative to the new Fabric Workspace Identity for accessing Azure Blob? in Pipelines

Anyone know of an alternative to the new Fabric Workspace Identity for accessing Azure Blob?

arpost — Wed, 20 Mar 2024 16:32:48 GMT

Greetings, community. I have a scenario where I need to enable access to an IP-whitelisted Azure blob storage account and have been waiting for the release of the managed identity for Microsoft Fabric. I was very excited to see this article that lays out the new Workspace Identity feature (MS doc link). That excitement evaporated when another community user pointed out that this is restricted to F64 and higher Fabric SKUs. That makes it unaccessible to organizations at lower tiers (even F32). ☹️

Does anyone know how to make it possible for a Fabric Data Factory to be able to acces an IP-restricted Azure blob storage account?

Re: Anyone know of an alternative to the new Fabric Workspace Identity for accessing Azure Blob?

v-cboorla-msft — Thu, 21 Mar 2024 07:38:06 GMT

Hi arpost

Thanks for using Microsoft Fabric Community.
At this time, we are reaching out to the internal team to get some help on this .
We will update you once we hear back from them.

Appreciate your patience.

Thanks.

Re: Anyone know of an alternative to the new Fabric Workspace Identity for accessing Azure Blob?

arpost — Thu, 21 Mar 2024 13:16:08 GMT

Appreciate it, v-cboorla-msft. What would be REALLY great is if Microsoft just made workspace identities available to lower (or simply all) F SKUs. 🙂 Especially from a security perspective and ease-of-use. But I'll take what I can get.

Re: Anyone know of an alternative to the new Fabric Workspace Identity for accessing Azure Blob?

v-cboorla-msft — Tue, 02 Apr 2024 08:48:01 GMT

Hi arpost

Apologies for the delay in response from my end.

Got an update from our internal team.

Fabric Data Factory (COPY activity in pipeline) now supports on-premises data gateway. You can use that to connect to ADLS private endpoints.

Dataflows Gen2 supports both OPDG and VNet gateway. So you can use those to connect to ADLS Gen2.

DF Gen2 now also supports FAST COPY; you can evaluate if it is applicable for you.

You can also use Azure Data Factory, if you have existing pipelines there, to ingest data into Fabric Lakehouse. If you would prefer this option.

I hope this information helps. Please do let us know if you have any further questions.

Thanks.

Re: Anyone know of an alternative to the new Fabric Workspace Identity for accessing Azure Blob?

v-cboorla-msft — Wed, 03 Apr 2024 16:52:35 GMT

Hi arpost

Thanks.

Re: Anyone know of an alternative to the new Fabric Workspace Identity for accessing Azure Blob?

v-cboorla-msft — Fri, 05 Apr 2024 07:03:44 GMT

Hi arpost

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others.
If you have any question relating to the current thread, please do let us know and we will try out best to help you.
In case if you have any other question on a different issue, we request you to open a new thread.

Thanks.

Re: Anyone know of an alternative to the new Fabric Workspace Identity for accessing Azure Blob?

arpost — Fri, 05 Apr 2024 18:09:02 GMT

Greetings, v-cboorla-msft. Thank you for those examples. Regarding the Data Factory pipelines, however, on-prem gateways wouldn't work as all of these are Azure resources in the cloud? How does one access secured cloud resources with data pipelines?

Unfortunately, Fast Copy with Dataflows doesn't yet support VNET Data Gateway.