Runing Notebooks under SPN

[wojciech]

Hi,

Does anyone know whether it's possible to run Fabric notebooks under the security context of a Service Principal (SPN), either:

• Directly via a scheduler

• Within a pipeline activity

• Via an API

I've found a few resources but haven't come across a definitive answer on whether it's supported - and if it is, what the preferred method would be.

Can anyone advise?

Thanks,
WJ

[wojciech]

 Thanks @v-achippa for claryfying... much appreciated

[v-achippa · Accepted solution]

Hi @wojciech,

Thank you for reaching out to Microsoft Fabric Community.

Currently running notebooks directly under an SPN context or running notebooks standalone using SPN is not supported. Notebooks always run under the identity of the user or the pipeline that triggers them.

The supported approach is to use the notebook in a Fabric pipeline and then trigger the pipeline using the Fabric REST API using SPN authentication.

• Create a pipeline that includes the notebook as an activity.
• Assign permissions to the Service Principal on the Fabric workspace like Contributor role or higher.
• Use the REST API to trigger the pipeline run using an AAD access token for the SPN.

If this post helps in resolving the issue, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it! 

Thanks and regards,

Anjan Kumar Chippa

[youdao4]

Thank you for the clear explanation, Anjan 🙌
Using the pipeline approach with SPN and REST API makes sense now. I’ll try triggering the notebook via Fabric pipeline as suggested and make sure the SPN has the necessary permissions.

Appreciate the detailed steps and clarification!