Forum Discussion

iremugurlu's avatar
iremugurlu
Microsoft Employee
5 months ago
Solved

Creating ICMs via Activator

I'm trying to create ICMs through Activator. But my test action is failing. I guess I need to give some permissions or use a specific connector. Or maybe my connector is wrong type? Would be great if I can get some help on what I'm doing wrong. 

 


 

  • iremugurlu's avatar
    iremugurlu
    4 months ago

    Hi v-sshirivolu I alrady tried that but there's no option for ICM in suggested solutions

    And when I try to go to help desk, it sends me an internal unrelated tech support page. Is there a proper link for support?

     

11 Replies

  • v-sshirivolu's avatar
    v-sshirivolu
    Community Support

    Hi iremugurlu ,

    The issue with creating ICM incidents using Microsoft Fabric Activator often occurs when Activator cannot properly connect to the configured ICM connector or when the required incident fields are not mapped correctly. Fabric Activator does not create incidents directly in ICM, instead it sends requests through an ICM connector configured in Azure. To resolve this, ensure that the Connector ID and Routing ID are correctly specified in the Activator rule configuration and that required fields such as Title, Severity, Routing ID, and Description are properly populated in the action settings, as missing or incorrect mappings can cause the Test Action to fail. It is also important to confirm that the user or service principal running the rule has permission to create incidents in ICM and that the Fabric workspace can access the connector. Additionally, check the tenant-level settings in the Fabric Admin Portal, since external integrations may be disabled by default and may need to be enabled by an administrator. If the Test Action still fails, reviewing the rule configuration, connector details, and field mappings usually helps identify whether the issue is related to connector configuration or routing information. Once the connector details, required fields, permissions, and tenant settings are correctly configured, rerun the Test Action to validate the setup, after which the Activator rule should successfully generate an ICM incident when the specified condition is triggered.

    • iremugurlu's avatar
      iremugurlu
      Microsoft Employee

      Thanks! A few specific things I need help with:

      1. Which service principal / identity does Fabric Activator use when calling the ICM connector? Is it a built-in Fabric first-party SP, or do I need to create my own?
      2. What connector type should I select in ICM - Certificate, Managed Certificate, or Azure Managed Service Identity (MSI)? And if MSI, which Azure tenant (PME/AME/Corp)?
      3. What Application ID do I need to whitelist in the ICM connector's allowed callers?
      4. Can you share a working example of a Connector ID + Routing ID pair that someone has already used successfully with Fabric Activator?

      • v-sshirivolu's avatar
        v-sshirivolu
        Community Support

        HI iremugurlu ,

        Fabric Activator usually calls downstream services using a Microsoft managed backend identity, so you normally do not need to create your own service principal. For the ICM connector type, you can try using Managed Certificate first since many Microsoft services use that model for service to service calls. If the test action fails, check the ICM connector logs or error message. Sometimes the failure response shows the caller application id that attempted the request. You can take that application id and add it to the allowed callers list in the ICM connector configuration and try again. For routing id and connector id, these are usually created and managed by your organization’s ICM admin or owning team, so you will need to use the values defined in your internal routing setup. This approach may help identify the correct caller identity and resolve the authorization issue.

  • iremugurlu's avatar
    iremugurlu
    Microsoft Employee

    v-sshirivolu this doesn't help me much because only error I'm getting is a message like this "Failed to create test action. Request ID: ab618507-ddec-48e1-9a23-e80a564ef5e7" I have an ICM team and I'm an owner as well. I'm using an existing connector which we use with our Azure Monitors. I'm not sure how to do this "check the ICM connector logs or error message" and also this "You can take that application id and add it to the allowed callers list in the ICM connector configuration and try again". My connector's alert source type is AzureMonitor. I'm guessing that's the correct one. 

  • iremugurlu's avatar
    iremugurlu
    Microsoft Employee

    Hi v-sshirivolu, at this point this is blocking me and I need ICM creation to finish up my project. Considering I'm internal Microsoft employee, is there any other support channel I can reach out to Microsoft Fabric team or create an incident for my issue? I couldn't find any documentation internally. Any direction or help would be useful here