c_donato
1 year agoNew Member
Status:
New
Enable Service Principal based Authentication for Dataverse shortcut
At present, the only supported method to access Customer Insights data within Microsoft Fabric is by creating a Dataverse shortcut. This shortcut establishes a connection to the underlying Dataverse environment where Customer Insights stores its data.
However, this integration currently supports only delegated permissions through OAuth2 with user credentials.
This means that access is tied to an individual user's identity and session, which introduces several limitations.
Security and Operational Limitations
No support for service principals:
- Prevents the use of managed identities or Azure AD app registrations, which are essential for secure, automated, and scalable enterprise integrations.
Tight coupling to individual users:
- If the user who created the shortcut is removed or disabled, the connection breaks, potentially disrupting critical data flows and processes.
Increased risk and complexity:
- Delegated access increases the risk of credential exposure and complicates access management, especially in environments with strict compliance or auditing requirements.
Suggested Enhancement
- Enable Dataverse shortcuts to support service principal authentication using the client credentials flow, allowing secure and automated access without relying on individual user accounts.
No CommentsBe the first to comment
Recent ideas
Power BI - incorrect handling of empty string parameter in DAX query in paginated report
Blank string parameters in paginated reports are treated as empty strings in Power BI Report Builder but as null values in the Power BI Service, resulting in incorrect report output. -> Create a pag...roshinikumarkar2 hours agoMicrosoft EmployeeNew20Views5likes0CommentsAllow NotebookUtils getSecret() to authenticate with Workspace Identity
Current behavior In Microsoft Fabric, notebookutils.credentials.getSecret() authenticates against Azure Key Vault using the identity of the user who executes the notebook. This behavior appli...tmihara3 hours agoNew MemberNew17Views1like1CommentAllow us to rename fabric data agents published to m365
If we use deployment pipelines to promote fabric data agents between dev, test/UAT, and prod fabric workspaces, we need to keep the name of the fabric agent the same in each workspace. If we want to ...PeterDaniels11 hours agoAdvocate IIINew187Views0likes2Comments