Forum Discussion

WDarwish's avatar
WDarwish
Frequent Visitor
2 years ago

Great find! Exactly what I was after. Managed to authenticate using the principal and got things running. Thank you.

kjellvs's avatar
kjellvs
Icon for Helper I rankHelper I
2 years ago

I am trying to achieve the exact similar thing, however when authenticating with 

ClientSecretCredential in python, I am unable to write to the warehouses. I am able to read from the same warehouses though.
 
More specifically, I get the following Error:
The INSERT permission or external policy action 'Microsoft.Sql/Sqlservers/Databases/Schemas/Tables/Rows/Insert' was denied on the object '[table]', database '[warehouse name]', schema 'dbo'.
 
When using AzureCliCredential, this problem does not persist. 
 
I have tried making the service principle admin (similar to my az credentials), but that also did not help.
 
Any clue how to have the service principle write to the warehouse?
kind regards,
Kjell
  • AndyDDC's avatar
    AndyDDC
    Icon for Most Valuable Professional rankMost Valuable Professional
    2 years ago

    Hi kjellvs how are you trying to write to the Warehouse? If you are trying to write to the storage directly it won't work, inserts into the warehouse can only be done via the sql endpoint of the warehouse - just checking to see how you're inserting so please forgive me if you already know this 

    • kjellvs's avatar
      kjellvs
      Icon for Helper I rankHelper I
      2 years ago

      Hi Andy, thank you for the reply. I was indeed trying to write via the SQL endpoint.

       

      I found a fix by giving:
      GRANT INSERT ON SCHEMA::dbo TO public;

       

      I didn't know I had to configure these additional rights.

       

      Kind regards,

      Kjell