REST API Support for Key Pair & OAUTH Authentication

[analienx]

Problem
Enterprise teams need to deploy Power BI/Fabric semantic models via CI/CD and set Snowflake credentials programmatically. Today, key pair (RSA) and robust OAuth setups can be configured interactively, but can’t be provisioned end-to-end through a supported public API in a way that enables fully automated, non-interactive deployments.

Missing feature
Extend the Power BI/Fabric REST APIs (connections/datasources/credentials) to support:

• Key Pair authentication (ie Snowflake )

• OAuth authentication (ie SharePoint) that works for automation (service principal / non-interactive flow), including a supported mechanism so scheduled refresh does not break due to short-lived tokens.

Why it matters

• Enables real CI/CD for semantic models: create → bind → set credentials → schedule refresh, without manual portal steps.

• Meets security requirements: eliminate stored passwords; align with modern MFA/SSO policies.

• Reduces operational risk: repeatable deployments across Dev/Test/Prod, easier credential rotation.

Acceptance criteria

• A documented REST contract to create/update Snowflake datasource credentials with credentialType: KeyPair (and required fields).

• A documented REST contract for OAuth where refresh/scheduled refresh remains functional without manual re-auth.

Example use case
Deploy a new workspace + semantic model nightly from Git, then set Snowflake credentials automatically and run a refresh—no human sign-in, no passwords, no manual UI clicks.