Forum Discussion

feelthelight14's avatar
feelthelight14
Frequent Visitor
2 years ago

Fabric REST API connection - GIT

Hi!
I have created Entra ID app and assigned delegated permissions: Tenant.ReadAll, Workspace.GitUpdate.All, Workspace.ReadWrite.All.

I would like to use Git API functionality, but during establishing of connection I am receiving an error:

 

{
  "requestId": "xxxxxx",
  "errorCode": "PrincipalTypeNotSupported",
  "message": "The operation is not supported for the principal type"
}

 


App has assigned Admin priviledges to that particular workspace that I am trying to get GIT status.
Worth to add that I am able to use other functionalities like: Get Domain, List Workspaces etc. In the documentation it is mentioned that 'Service principals are not supported', but why some of services are working and some not? Should be that App added somewhere in Admin Tenant settings as well?

I will really appreciate your help, thanks! 🙂

Need Help
Tips and Tricks

6 Replies

  • bsmucker's avatar
    bsmucker
    Frequent Visitor
    2 years ago

    We've run into this service principal limitation for our enterprise deployment.

     

    For example, I am able to use the Fabric - Core - Deployment Pipelines API as a service principal, but not the Git APIs.

     

    Even if the functionality is currently in preview, is there any sort of roadmap as to when support for service principals might come for the Git APIs?

     

    I've opened a support request, but, between the lack of service principal support for Git APIs and the one-to-one restriction of workspace-to-Power BI deployment pipeline stage, the options for officially supported enterprise deployment appear limited and insufficient.

    • feelthelight14's avatar
      feelthelight14
      Frequent Visitor
      2 years ago

      Sorry, but it's not helpful. The question was why it does work only for some Fabric API and for some not.

      • lbendlin's avatar
        lbendlin
        Super User
        2 years ago

        If I had to guess I would say that auditing considerations are playing a role.  Anything "destructive"  should be possible to link back to a real person.

         

  • Anonymous's avatar
    Anonymous
    Not applicable
    2 years ago

    Hi feelthelight14,

    As lbendlin said, these part of fabric rest api still in preview so they may not work as common rest api and support all type of features and authorizations.

    You can also refer to the following official documents about fabric rest api usage and it mention the service principal mode not supported.

    Microsoft Fabric REST APIs for automation and embedded analytics - Microsoft Fabric REST APIs | Microsoft Learn

    >>App has assigned Admin priviledges to that particular workspace that I am trying to get GIT status.
    Worth to add that I am able to use other functionalities like: Get Domain, List Workspaces etc. In the documentation it is mentioned that 'Service principals are not supported', but why some of services are working and some not? Should be that App added somewhere in Admin Tenant settings as well?

    In summary, these features may not fully release to global environment so some of they can be used but the others not. (these parts did not clearly mention in the documents, if you want to know more about them you can consider opening a support ticket to contact to the dev team to get detail information)

    Regards,

    Xiaoxin Sheng