frithjof_v's avatar
frithjof_v
Community Champion
1 year ago
Status:
New

Full support for notebookutils.credentials.getToken() when using a Service Principal

When running a Notebook in the security context of a Service Principal, unfortunately notebookutils.credentials.getToken('pbi') and notebookutils.credentials.getToken('https://api.fabric.microsoft.com') only return a few scopes:

 

* Dataset.ReadWrite.All

* Lakehouse.ReadWrite.All

* MLExperiment.ReadWrite.All

* MLModel.ReadWrite.All

* Notebook.ReadWrite.All

* SparkJobDefinition.ReadWrite.All

* Workspace.ReadWrite.All

 

This severely limits the usability of the token when working in Fabric for other item types and Fabric REST APIs. Please make it so that the token can access all item types and all Fabric REST APIs.

 

The Service Principal has Contributor access to the workspaces and the Notebook is executed in the security context of the Service Principal.

 

Ref.: https://www.reddit.com/r/MicrosoftFabric/s/OoUhmOT1qg

No CommentsBe the first to comment

Recent ideas