An External Azure Guest and Workspace Admin is unable to create connection from dataflow gen2

[oboacj89]

Hi everyone,

I'm encountering an issue in Fabric where an external user (added as a guest and workspace admin) is unable to connect a dataflow gen2 to a lakehouse or warehouse, despite having seemingly sufficient permissions.

Here's the setup:

• Fabric Capacity: Pro
• User: External guest user (obo) with workspace admin role.
• Dataflow: Gen2, using a JSON link to connect to a data warehouse/lakehouse.
• Issue: Dataflow fails to connect to the lakehouse when published, only with the external user. A master account (ajohnson), which is a tenant member, works fine.

Error Messages:

• "There was a problem refreshing the dataflow. Please try again later. (Request ID: 197c5376-5ba7-4d23-a70d-1981659168eb)."
• "salesreport_WriteToDataDestination: Challenge Error Data source credentials are missing or invalid. Please update the connection credentials in settings, and try again."

Troubleshooting Steps Taken:

• Verified the external user has "Workspace Admin" permissions on the lakehouse.
• Confirmed the data source connection works correctly (JSON link and credentials).
• Tried creating a new lakehouse and dataflow.

Observations:

• The external user can create lakehouses and dataflows, but can't connect the two together
• The master account (tenant member) can connect dataflows to lakehouses without issues.
  
  
  

[v-yilong-msft]

Hi @oboacj89 ,

I think you can do these steps below:

1. Ensure that the external guest user has the correct tenant permissions. Sometimes, external users might face restrictions due to tenant settings.

2. The error message suggests that there might be an issue with the credentials. Make sure the external user is using the correct credentials and try re-authenticating the connection.

3. If the data source is on-premise, ensure that the necessary gateway is configured. However, since you mentioned all connections are cloud-based, this might not be applicable.

Best Regards

Yilong Zhou

If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

[oboacj89]

1. Ensure that the external guest user has the correct tenant permissions. Sometimes, external users might face restrictions due to tenant settings. Can you be more specific? I have already assigned this user Fabric Admin role (See photo)

2. The error message suggests that there might be an issue with the credentials. Make sure the external user is using the correct credentials and try re-authenticating the connection. I am the "external" user and I am using the same credentials from both the Tenant Admin (ajohnson) and the external account (obo). The JSON link I am using with basic authentication loads the query fine from both accounts. The problem is when I go to connect on the bottom right of the page.

3. If the data source is on-premise, ensure that the necessary gateway is configured. However, since you mentioned all connections are cloud-based, this might not be applicable. not applicable. data source links in via web API (JSON)