Forum Discussion
Eventstream connection with Event Hub
Hello,
I have an existing event hub which I'm planning to use with an eventstream in Fabric. I see two connection options:
1. SAS keys
2. Organisational account
I'm in a microsoft internal team and we're not allowed to use SAS keys. When I try to use my own account via organisational account option I'm getting following error
Sign in failed with the following error code: "invalid_request". Error description given: "AADSTS65002: Consent between first party application 'b52893c8-bc2e-47fc-918b-77022b299bbc' and first party resource '80369ed6-5f11-4dd9-bef3-692475845e77' must be configured via preauthorization - applications owned and operated by Microsoft must get approval from the API owner before requesting tokens for that API. Trace ID: 3e344c2e-4ab0-442d-af25-23f3e1c15500 Correlation ID: 18583d2a-007b-4b7a-a7d0-5485087e55c7 Timestamp: 2025-07-29 16:05:32Z" (Session ID: f67ac96c-b700-4aed-8514-2b9acd5b00c8, Region: usfr)
I'm wondering how to solve this and also is there any support to use Managed Identities for auth? This is normally possible but I don't see how via Microsoft Fabric.
4 Replies
Hi iremugurlu , For EventHub as source of Eventstream, we currently only support Key based authentication. I'll file a bug to our UX team to remove the "Orgnaization account" option. Please use "Shared access key" authentication. And we'll support workspace identity authentication in the near future.
https://learn.microsoft.com/en-us/fabric/real-time-intelligence/event-streams/add-source-azure-event-hubs?pivots=basic-features#configure-azure-event-hubs-connectorHi iremugurlu,
The AADSTS65002 error appears because Fabric Eventstream isn't preauthorized to access Azure Event Hub through Azure AD, and end users can't fix this issue. Since your tenant blocks SAS key usage and the Organizational Account option doesn't work,
I suggest submitting an internal support ticket or reaching out to your IT team for assistance:
How to create a Fabric and Power BI Support ticket - Power BI | Microsoft Learn
Hope this helps
Thank you.
Hi iremugurlu,
May I know if you have raised the support ticket or if the issue has been resolved?
Thank you.
Hi,
The error (AADSTS65002) indicates that this is an Azure AD consent/preauthorization issue rather than a problem with Eventstream itself. Specifically, the Fabric first-party application is attempting to obtain a token for Azure Event Hubs, but the required preauthorization/tenant consent hasn't been granted.
A few things to check:
Verify that your Entra ID (Azure AD) administrator has granted the required consent for the Fabric application to access Azure Event Hubs in your tenant.
Since you're on a Microsoft internal tenant where SAS keys are restricted, it's possible that tenant policies are blocking this first-party application from requesting tokens until it's explicitly preauthorized.
If possible, test the same Organizational Account connection in a different tenant to determine whether the issue is tenant-specific.
Regarding Managed Identity, as of today, Fabric Eventstream doesn't provide a native option to authenticate to Azure Event Hubs using a user-assigned or system-assigned Managed Identity through the Eventstream connection UI. If this is a requirement for your organization, it's worth checking the latest documentation or raising it with Microsoft Support, as authentication capabilities continue to evolve.
A few questions:
Is the Event Hub in the same tenant as your Fabric workspace?
Has an Entra ID administrator already granted tenant-wide consent for the required Microsoft applications?
Are you able to connect using an Organizational Account from a non-internal tenant?
If this is a Microsoft internal tenant, I'd also recommend involving your tenant administrators, as they can verify whether the required preauthorization policy is preventing token issuance.
If Microsoft provides a workaround or confirms Managed Identity support, please consider sharing the resolution here—it would be helpful for others facing the same authentication issue.
If you found this reply helpful, please consider giving it a Kudos. If it helps resolve your question, marking it as the Accepted Solution will help other community members encountering the same problem.
