Forum Discussion

kaouter's avatar
kaouter
Frequent Visitor
5 months ago
Solved

Fabric - Airflow Jobs - Notebook Access to Key Vault -mssparkutils.credentials.getSecret returns 403

Hi all, I've been hitting a 403 Forbidden error when calling mssparkutils.credentials.getSecret from a Fabric notebook triggered via Apache Airflow. The error message includes a caller appid (caxxxx...
data engineering
data pipeline
notebook
  • tayloramy's avatar
    tayloramy
    4 months ago

    Hi kaouter, 

     

    As we discussed on Discord, Fabric uses the security context of the identity that calls the API to trigger the notebook to access the keyvault. 

     

    In your case, when you have an airflow SPN triggering the notebook, that SPN is the identity that needs permissions on the keyvault for the notebook to be able to successfully authenicate to the keyvault. 

     

    It was great connecting with you on Discord and being able to help! 

v-ssriganesh's avatar
v-ssriganesh
Icon for Community Support rankCommunity Support
4 months ago

Hi kaouter,

Thank you for posting your query in the Microsoft Fabric Community Forum, and thanks to tayloramy for sharing valuable insights.

 

Could you please confirm if your query has been resolved by the provided solutions? This would be helpful for other members who may encounter similar issues.

 

Thank you for being part of the Microsoft Fabric Community.