Situation : Currently, Power BI (/Microsoft Fabric) do not provide a native way to automatically configure credentials for Synapse Serverless connections, especially in scenarios where automated deployments or service principals are used. This limitation makes it difficult to implement fully automated solutions for data access and refresh without manual intervention. Requested Feature: Introduce native support for automated credential configuration for Synapse Serverless connections in Power BI and Fabric. Specifically, it should: Allow service principals and managed identities to authenticate without manual setup Support secure, scalable automation across enterprise environments Integrate with deployment pipelines and governance models Optionally integrate with Azure Key Vault for secure credential storage Why this matters: This feature would enable organizations to build robust, secure, and automated BI solutions while eliminating manual, error-prone steps. It is critical for: Large-scale deployments and CI/CD automation Enterprise compliance (MFA, ISO, SOC, GDPR) Reducing credential leakage risks from insecure workarounds Additional Technical context (use case): Current workaround using ROPC (Resource Owner Password Credentials) fails when MFA is enforced, which is common in enterprise environments. Service accounts with MFA cannot be used for automated refresh, creating a gap for organizations that follow strict security policies. A native solution should support Azure AD authentication via service principals or managed identities, similar to other Fabric connectors. This would align with modern security practices and eliminate the need for insecure credential storage or manual intervention. Technical Context (Use Case) The current ROPC (Resource Owner Password Credentials) workaround fails under MFA — now mandatory in most enterprises. Service accounts with enforced MFA cannot be used for automated refresh, leaving a gap for secure automation. A native solution should support Azure AD-based authentication via service principals or managed identities, similar to Azure Data Factory and Synapse Pipelines. API Attempts Power BI REST API: PATCH /gateways/{gatewayId}/datasources/{datasourceId} → update credentials programmatically POST /gateways/{gatewayId}/datasources → create data sources with credentials Fabric / Power BI Service Principal Authentication: Tested OAuth2 flows using client_id and client_secret for service principals MFA enforcement blocks ROPC flow Synapse SQL Connection (DirectQuery): Attempted credential injection via deployment pipelines using Update Datasource API No native credential automation support Proposed Direction Add Managed Identity and Service Principal support for Synapse Serverless in Power BI datasets Enable credential binding through REST API or Fabric Deployment Pipelines Integrate Key Vault for secure, centralized credential management Call to Action / Request We strongly encourage Microsoft to prioritize this capability to align Power BI and Fabric with modern cloud security and DevOps automation standards, comparable to Azure Data Factory and Synapse Pipelines. Thanks to @v-pnaroju-msft for your assistance & ideas
... View more