Forum Discussion

KGU_16031986's avatar
KGU_16031986
Advocate I
7 months ago

Lakehouse/ warehouse support for SQL Logins

There is a concern that lakehouse/warehouse or any database within Fabric does not support sql logins. So if we need to access database from a webpage or real time dashboards like Grafana, we cannot ...
data engineering
deborshi_nag's avatar
deborshi_nag
Super User
7 months ago

Hi KGU_16031986 

 

Microsoft Fabric supports Microsoft Entra ID (users, service principals, and managed identities) only! You can use a SPN or a Managed Identity for your use case. 

 

For Web Apps - 

  • Register an app in Entra ID (or use a managed identity if the app runs on Azure App Service, Functions, Container Apps, AKS, etc.).
  • Grant the app workspace access and database permission (e.g., db_datareader, specific schemas, or securables) using the Fabric SQL role model.
  • The app gets an access token from Entra (OAuth2 client‑credentials flow for SPN or MSI flow for managed identity).
  • Connect via a regular TDS client/driver (ODBC/JDBC/ADO.NET) using the token (no username/password).

 

For Grafana

Use Fabric’s Real‑Time Intelligence (Kusto) route and Grafana’s Azure Data Explorer (ADX/Kusto) datasource.

  • Fabric’s Eventhouse / KQL Database stores real‑time data and exposes it through the ADX-compatible endpoint (Kusto). Grafana has a first‑class “Azure Data Explorer” data source supporting Entra auth (Managed Identity, Service Principal, Current User). 
  • This pattern is already documented and used in demos/labs (Managed Grafana ↔ KQL DB).

fabricrtidemos/grafana_server_telemetry_demo at main · microsoft/fabricrtidemos

 

 

Hope this helps - please appreciate by leaving a Kudos or accepting it as a Solution!