Problem
Enterprise teams need to deploy Power BI/Fabric semantic models via CI/CD and set Snowflake credentials programmatically. Today, key pair (RSA) and robust OAuth setups can be configured interactively, but can’t be provisioned end-to-end through a supported public API in a way that enables fully automated, non-interactive deployments.
Missing feature
Extend the Power BI/Fabric REST APIs (connections/datasources/credentials) to support:
Key Pair authentication (ie Snowflake )
OAuth authentication (ie SharePoint) that works for automation (service principal / non-interactive flow), including a supported mechanism so scheduled refresh does not break due to short-lived tokens.
Why it matters
Enables real CI/CD for semantic models: create → bind → set credentials → schedule refresh, without manual portal steps.
Meets security requirements: eliminate stored passwords; align with modern MFA/SSO policies.
Reduces operational risk: repeatable deployments across Dev/Test/Prod, easier credential rotation.
Acceptance criteria
A documented REST contract to create/update Snowflake datasource credentials with credentialType: KeyPair (and required fields).
A documented REST contract for OAuth where refresh/scheduled refresh remains functional without manual re-auth.
Example use case
Deploy a new workspace + semantic model nightly from Git, then set Snowflake credentials automatically and run a refresh—no human sign-in, no passwords, no manual UI clicks.
Recent ideas
Allow NotebookUtils getSecret() to authenticate with Workspace Identity
Current behavior In Microsoft Fabric, notebookutils.credentials.getSecret() authenticates against Azure Key Vault using the identity of the user who executes the notebook. This behavior appli...tmihara44 minutes agoNew MemberNew3Views0likes0CommentsSupport Synonyms in Fabric Warehouse
Microsoft SQL Server has a very powerful feature by the way of "synonyms." It allows users and DBAs to do all sorts of powerful magic such as rewiring objects under the hood (e.g. run the code agains...matthias-bi4 hours agoRegular VisitorNew1.3KViews18likes2CommentsExpose Refresh Warnings and Informational Messages via Notifications and API
When a Power BI semantic model refresh completes successfully, the status shows Completed, even when the refresh details contain warnings or informational messages that require attention. Please pro...Jashwanth_K6 hours agoMicrosoft EmployeeNew22Views6likes0CommentsInvoke Pipeline Task - Workspace Identity Authentication
Currently, the Fabric Data Factory Invoke Pipeline task uses the user's credentials who saved the pipeline to then authenticate to the Azure Data Factory to execute the ADF pipeline. When that user'...dzebrowitz10 hours agoAdvocate IPlanned1.8KViews61likes5CommentsFabric Pipeline should run as workspace identity
Currently, Microsoft Fabric pipelines run under the identity of the last user who modified them, which can cause disruptions when tenant administrators make changes to security policies, such as enab...pellitteris10 hours agoAdvocate IINew1.4KViews27likes3Comments