Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 

Enhance your career with this limited time 50% discount on Fabric and Power BI exams. Ends August 31st. Request your voucher.

Reply
JohnP_RI
New Member

Azure Function Connection to MS Fabric SQL endpoint results in Login Failed

Has anyone successfully connected to a Fabric SQL endpoint using user/system assigned identities or a service principal?

 

I have my service principal(s) in an azure security group and that group has permissions to the lakehouse/SQL endpoint (validated by also having a user in that group), however when connecting with any of these Service Principal types I get 18456 Login Failed.

 

If anyone has, can you please share how you did it?  (connection string format, what type of identity etc).

 

Thanks!

1 ACCEPTED SOLUTION
JohnP_RI
New Member

Figured this out:

  • In PowerBI, go to the Admin Portal 
  • Make sure you are a PowerBI administrator and can see the “Tenant Settings” section on the Admin Portal 
  • In this section, 2 things need to be turned on: 
  1. Developer Settings -> Allow service principals to create and user profiles 
  2. OneLake Settings -> Users can access data stored in OneLake with apps external to Fabric 
  • Now you can manage permissions on the workspace you want to access from your AZ Function.  When you add a user to the permissions, you can type in the name of the AZ Function rather than a user. (assuming you've already created a system generated identity)
  • Now you can use the "Azure Directory Default" authentication method in the connection string.

View solution in original post

1 REPLY 1
JohnP_RI
New Member

Figured this out:

  • In PowerBI, go to the Admin Portal 
  • Make sure you are a PowerBI administrator and can see the “Tenant Settings” section on the Admin Portal 
  • In this section, 2 things need to be turned on: 
  1. Developer Settings -> Allow service principals to create and user profiles 
  2. OneLake Settings -> Users can access data stored in OneLake with apps external to Fabric 
  • Now you can manage permissions on the workspace you want to access from your AZ Function.  When you add a user to the permissions, you can type in the name of the AZ Function rather than a user. (assuming you've already created a system generated identity)
  • Now you can use the "Azure Directory Default" authentication method in the connection string.

Helpful resources

Announcements
July 2025 community update carousel

Fabric Community Update - July 2025

Find out what's new and trending in the Fabric community.

July PBI25 Carousel

Power BI Monthly Update - July 2025

Check out the July 2025 Power BI update to learn about new features.