Create Sharepoint shortcut in Fabric lakehouse by code/API

[amaaiia]

I have a Microsoft Fabric connection set up with SharePoint. Manually, I can use that connection to create a shortcut in a Lakehouse for a SharePoint site.

I want to perform this process via API/code. I want to be able to create a shortcut in a Lakehouse using the lakehouse_id (the ID of the Lakehouse where I want to create the shortcut), connection_id (the ID of the SharePoint connection), sharepoint_relative_path (the relative SharePoint path I want to save as a shortcut under “Files” in the Lakehouse), and shortcut_name (the name I want to give that shortcut in the Lakehouse).

I've tried with:

from sempy.fabric import FabricRestClient
client = FabricRestClient()

shortcut_name = "projects_shortcut"

response = client.post(
    f"/v1/workspaces/{ws_id}/items/{lakehouse_id}/shortcuts",
    json={
        "displayName": shortcut_name,
        "path": "Files",
        "target": {
            "type": "SharePoint",
            "connectionId": connecion_id,
            "path": sharepoint_relative_path
        }
    }
)

if response.status_code not in [200, 201]:
    raise Exception(response.text)

print("✅ Shortcut created")

But I get: 

FabricHTTPException

403 Forbidden for url:

I've tried also:

from sempy.fabric import FabricRestClient
client = FabricRestClient()
client.get("/v1/connections")

And I get the same 403 Forbidden error.

Any ideas?

[v-hjannapu]

Hi @amaaiia,

I would also take a moment to thank @tayloramy  , for actively participating in the community forum and for the solutions you’ve been sharing in the community forum. Your contributions make a real difference.
 

I wanted to check if you had the opportunity to review the information provided. Please feel free to contact us if you have any further questions.

Regards,
Community Support Team.

[v-hjannapu]

Hi @amaaiia,
I hope the above details help you fix the issue. If you still have any questions or need more help, feel free to reach out. We are always here to support you.


Regards,
Community Support Team.

[tayloramy]

Hi @amaaiia ,  

How was your service principal granted access to the sharepoint site? 

Does it have Sites.Selected? 
See this post for more info on how to grant permissions properly: https://heyniels.com/2026/03/15/connect-fabric-to-sharepoint-after-the-acs-retirement/

[tayloramy]

Hi @amaaiia, 

The API you are trying to use is the correct one, https://learn.microsoft.com/en-us/rest/api/fabric/core/onelake-shortcuts/create-shortcut?tabs=HTTP

Note that your body has incorrect parameters, specifically there is no "displayName" property. 
Here is the sharepoint example from the documentation: 

POST https://api.fabric.microsoft.com/v1/workspaces/bf94607f-3ba1-4a95-8259-27649ccd7755/items/884e71cd-f...

{
"path": "Files",
"name": "MyOneDriveSharePoint",
"target": {
"oneDriveSharePoint": {
"location": "https://microsoft.sharepoint.com",
"subpath": "/Shared Documents/Test Folder",
"connectionId": "97e33458-1353-4911-96b1-6f4f4bbfd335",
"updateFabricItemSensitivity": false
}
}
}

The 403 error means whatever user is being used does not have permissions to do what you are trying to do. Can you confirm if you are using your account or a service principal to run the notebook? Can you confirm what workspace permissions you have on the workspace where the lakehouse you are trying to add a shortcut to is? 

[amaaiia]

I realized I was entering the payload incorrectly. I updated it, but I'm still getting the same error ("The caller does not have sufficient scopes to perform this operation). My personal account is an Admin on the workspace, and I do have access to the SharePoint site. The connectionId I'm using works because I'm using it to cerate shortcuts manually in the lakehouse.

I tried something else, which was using a service principal instead of my own account. I granted the app the necessary API permissions, and I think I’ve resolved that issue.

credential = ClientSecretCredential(
    tenant_id=tenant_id,
    client_id=client_id,
    client_secret=client_secret
)

def get_token():
    return credential.get_token(
        "https://api.fabric.microsoft.com/.default"
    ).token

client = FabricRestClient(token_provider=get_token)

Now, when I list the connections, I can see them. But now I’m getting another error when trying to create a new shortcut using that connection:

payload = {
    "name": shortcut_name,
    "path": "Files",
    "target": {
        "oneDriveSharePoint": {
            "connectionId": connectionId,
            "location": location,
            "subpath": subpath
        }
    }
}

response = client.post(
    f"/v1/workspaces/{new_ws_id}/items/{lakehouse_id}/shortcuts",
    json=payload
)

if response.status_code not in [200, 201]:
    print(response.text)
    raise Exception(response.text)

print("✅ Shortcut created")

FabricHTTPException
400 Bad Request for url: https://api.fabric.microsoft.com//v1/workspaces/xxxxxxxxxxxxxx/items/xxxxxxxxxxxxxxxxx/shortcuts Error: {"requestId":"xxxxxxxxxxxx","errorCode":"BadRequest","moreDetails":[{"errorCode":"SharePointResourceNotFound","message":"Error getting DriveId from SharePoint API: Forbidden. StatusCode: Forbidden. Details: {\"StatusCode\":403,\"ReasonPhrase\":\"Forbidden\",\"RequestUri\":\"https://xxxxx.sharepoint.com/sites/YYYYYYYYYYY/_api/v2.0/shares/u!xxxxxxxxxxxxxxxxxx/drive?$select=id,name,driveType,folder\",\"Details\":\"{\\\"error\\\":{\\\"code\\\":\\\"accessDenied\\\",\\\"innerError\\\":{\\\"code\\\":\\\"sharesAccessDenied\\\"},\\\"message\\\":\\\"The system cannot find the file specified. (Exception from HRESULT: 0x80070002)\\\",\\\"@onedrive.linkFeatures\\\":[]}}\"}"}],"message":"The request could not be processed due to missing or invalid information","isRetriable":false} Headers: {'Cache-Control': 'no-store, must-revalidate, no-cache', 'Pragma': 'no-cache', 'Transfer-Encoding': 'chunked', 'Content-Type': 'application/json; charset=utf-8', 'x-ms-public-api-error-code': 'BadRequest', 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains', 'X-Frame-Options': 'deny', 'X-Content-Type-Options': 'nosniff', 'RequestId': 'xxxxxxxxxxxx', 'Access-Control-Expose-Headers': 'RequestId', 'request-redirected': 'true', 'home-cluster-uri': 'https://wabi-north-europe-i-primary-redirect.analysis.windows.net/', 'Date': 'Tue, 02 Jun 2026 14:46:17 GMT'}

- My connection is using Service Principal authentication (specifically, I have an app that has access to the SharePoint site, and that’s the one I use for authentication in the connection). Connection is working because I use it to create shortcuts manually.
- I have another master app that I use to create the Fabric token.

[amaaiia]

Copilot tells me that this issue is because the app I'm using to get fabric token doesn't have access to sharepoint. But it this true?

When I create manual shortcuts using this connection, it uses the token from my personal account, which shouldn't have access to SharePoint, since it's the connection itself—which uses Service Principal authentication—that authenticates against SharePoint.

I understand that even if I use another app to obtain the token, the behavior should be the same—that is, the Fabric token app does not have access to SharePoint (just like my personal account)—but when using the SharePoint connection with the app that DOES have access to SharePoint, it is that app that is used for authentication with the SharePoint site.

[amaaiia]

I've designed a mockup to better understand de use case of what is happening: