Unable to create a ADLSg2 shortcut due to authorization denial

[amaaiia]

I'm trying to create a shortcut to a new Storage Account I've recently created. I have a samplecontainer container where I have raw directory and a csv file inside.

I go to my lakehouse>New shortcut>ADLSg2>(I fill the URL with DLS path in Endpoints)>Next(Organizational Account authentication)>(I select samplecontainer>raw)>Next>Create, and I get an authentication error:

I've checked the roles of my user and I think they are right:

What am I missing?

[amaaiia · Accepted solution]

My fault, I didn't configured the Storage Account to be ADLSg2 type. I didn't enabled Hierarchical namespace. Once enabled, it works.

[v-nikhilan-msft]

Hi @amaaiia 
Thanks for using Fabric Community.
Can you please confirm if the Fabric Capacity and the ADLS Gen2 container belong to the same region or different one?
Thanks

[amaaiia]

Storage Account belongs to westeurope and Fabric capacity to North Europe. Is this a problem?

[v-nikhilan-msft]

Hi @amaaiia 
Are you using any Firewall? If yes please check this 
https://learn.microsoft.com/en-us/fabric/security/security-trusted-workspace-access#configure-truste...

And please check if the DFS link you provided is pointed to the storage container and not the subfolder.

[amaaiia]

1. I'm pointing to the right DFS enpoint

2. I created the container yesterday and I haven't configured any firewall.

[v-nikhilan-msft]

Hi @amaaiia 
I tried to repro the same scenario and was unsuccessful while using the authentication as Oraganizational account. Try using the account key as authentication it worked for me.

You can find the Account key in the Access keys tab of the storage container.

Please let me know if the issue still persists. Hope this helps.

[amaaiia]

Still same error

[v-nikhilan-msft]

Hi @amaaiia 
Are you using the https link with dfs or blob enpoint? Make sure to use this link :
https://StorageAccountName.dfs.core.windows.net
As per the screenshot provided, I think you are using .blob endpoint. Please check this and let me know.

[amaaiia]

Yes, when connection is created I use DFS endpoint, I don't know why the error is happening for BLOB endpoint. Let me show you steps:

[v-nikhilan-msft]

Hi @amaaiia 
Try to create a new connection.

If the issue still exists try to create a new storage account and check once.