The ultimate Fabric, Power BI, SQL, and AI community-led learning event. Save €200 with code FABCOMM.
Get registeredEnhance your career with this limited time 50% discount on Fabric and Power BI exams. Ends September 15. Request your voucher.
I need to connect fabric data warehouse from one domain to different domain with service principle using Azure synapse, I need to copy data from fabric data warehouse to sql database, I need proper steps to give what are the required permissions for service principle and I need required permissions in fabric workspace.
We already created one service principle in Domain-1 Azure (XYZ.123@xyz.com) and we are trying to connect in fabric workspace with Domain-2 Fabric (abc.123@abc.com) using service principle, we are trying to give fabric workspace access to azure service principle (Domain1) but We are unable to see or connect azure service principle
We have created the Enterprise Application in Domain-2(Fabric) we followed below steps
Step -1:
Step-2:
Step-3:
Step-4:
step-5:
Step-6:
Step-7: (We are struck in step7,Tell me the following steps)
How to assign Domain -1(Azure) client id to the Enterprise Application in Domain-2(Fabric) which is created above,Tell me the steps to assign client id
We have created Enterprise Application in Domain-2(Fabric) and where we need to assign Domain -1(Azure) client id to the Enterprise Application in Domain-2(Fabric), can you give me the step by step process
In your case the problem is that the service principal was created in Domain-1 AAD, while the Microsoft Fabric environment belongs to Domain-2 AAD. Fabric can only see service principals that exist in its own tenant, so the Domain-1 service principal must first be registered as an Enterprise Application in Domain-2. Once you do that, Fabric in Domain-2 will be able to recognise and grant permissions to it.
The sequence is as follows:
in Domain-2 AAD, create an Enterprise Application using the client ID of the Domain-1 service principal, then in the Fabric Admin portal make sure that service principal access is enabled, and finally add the service principal as a member of the Fabric workspace with an appropriate role such as Contributor or Viewer. Inside the Fabric data warehouse, create a SQL user for the service principal from external provider and assign it to db\datareader or db\_datawriter roles depending on whether you need read or write.
After these steps, in Synapse you can configure a linked service to the Fabric SQL endpoint using the same service principal credentials and copy data into SQL Database. The key missing piece in your setup is that the Domain-1 service principal must be explicitly brought into Domain-2 as an Enterprise Application before it can be assigned permissions in Fabric.
User | Count |
---|---|
3 | |
3 | |
1 | |
1 | |
1 |
User | Count |
---|---|
12 | |
4 | |
3 | |
3 | |
2 |