Connection from Azure Analysis Service (AAS) to Fabric Warehouse using gateway

[KimTutein]

I am looking into potential moving from Synapse Dedicated pool into Fabric Warehouse. However today we have some large Azure Analysis Service (AAS) models that we will not move into Fabric day one. One is a very large imported models (150 GB) which we might eventually look into moving to Fabric / Directlake but for now I would like first step to move just Synapse Dedicated pool and then keep import models in AAS.

And now the problem:

Has anyone been able to make a connection from AAS via. a gateway (installed in Azure on a VM) into a Fabric Warehouse. When we use dedicated pool we use an SQL login user. That is not an option In Fabric Warehouse as they do not support SQL login. I would have expected I could use an Application registration and secret – I can make a connect from for instance Python and connect to warehouse with no problem but I cannot get a connection using a Service Principal from AAS through gatetway into Fabric warehouse.

Any input would be much appreciated.

[KimTutein]

Hi @v-shex-msft 

Thank you for input. However this is not a connection in data factory but a connection from AAS to Fabric warehosue - I would expect the problem then being in AAS compatability and not Azure Data Factory?

[v-shex-msft · Accepted solution]

HI @KimTutein,

In fact, these limits also suitable for data warehouse. When you use data warehouse, it allows you to use dataflow, data pipeline to ingest data.
Or you can try to deploy a web service as bridge to receive and send credentials, query data from Azure AS based on service principal authorization and return the output table records.
Then you can use web connector with correspond credentials to invoke web service and receive the data. (In my opinion, it is simpler to waiting azure team to release update of authorization support between azure and fabric)

Regards,

Xiaoxin Sheng

[KimTutein]

Hi @v-shex-msft 

Thank you for all your input - I think you are correct - I fear we need to wait until the authorization between azure and fabric is established.

[v-shex-msft]

Hi @KimTutein,

What type data source are you means? The Azure Analysis Service or the on premise SQL Analysis Service that install in the Azure VM?

If you mean Azure Analysis Service, it not require a gateway for handle refresh operations. You can directly create a dataflow and official connector to getting data from Azure Analysis Service to data warehouse. (notice: current it seems only support 'base' and 'organization account' authorization mode)

Regards,
Xiaoxin Sheng

[KimTutein]

Hi Xiaoxin Sheng

Thank you for your reply. We are looking to keeping Azure Analysis Service (AAS) as destination and then using Microsoft Fabric Warehouse as source. Our AAS connects to datasources using an Azure VM with a gateway. For now I have only been able to connect using a normal Microsoft account by updating credential in AAS connection in AAS using Sequel Server Management Studio (SSMS) - however that solution is not an option as this requere multi factor authentication (MFA) and will only add a token that will expire in 1-2 hours. I need the connection to be made using for instance an registred application and secret as this does not requere MFA. However this does not seem to be an option?

Friendly regards

Kim Tutein

[v-shex-msft]

HI @KimTutein,

Here is the data source list which support service principal use in fabric.

Service principal support in Data Factory - Microsoft Fabric | Microsoft Learn

Currently, the SPN authentication type only supports the following data sources:

• Azure Data Lake Storage
• Azure Data Lake Storage Gen2
• Azure Blob Storage
• Azure Synapse Analytics
• Azure SQL Database
• Dataverse
• SharePoint online
• Web

In my opinion, you can consider to mapping your data to above data source or submit an idea for add support to AAS data connector to use service principal authorization.

Microsoft Fabric Ideas

Regards,
Xiaoxin Sheng