Forum Discussion
Connecting Fabric Data Agent via Service Principal or Managed Identities
- 1 year ago
Hi Anshid_K , Thank you for reaching out to the Microsoft Community Forum.
You're correct, this setup does conflict with user-level access control. And no, there is currently no supported way to generate or use user-specific tokens with the Fabric Data Agent. The agent only supports preconfigured connections using static credentials and does not support delegated authentication or identity passthrough from users.
If you need user-level access, it has to be enforced after the data reaches Fabric, for example, through row-level security (RLS) in Power BI or logic within Fabric workloads. The agent itself cannot enforce per-user access at the source.
How to access on-premises data sources in Data Factory - Microsoft Fabric | Microsoft Learn
Fabric data agent creation (preview) - Learn how to create a Fabric data agent | Microsoft Learn
Authenticate with Microsoft Fabric workspace identity - Microsoft Fabric | Microsoft Learn
Hi v-hashadapu ,
My requirement is a bit different, but might have found a way around with OAuth and get_token() function to get user token from Power BI scope to access fabric agent. Still need to test it out
Hi Anshid_K , Thanks for the update. Please share your results here after testing.