FUAM Load_FUAM_Data_E2E error

Sure, here’s a step-by-step guide to setting up a service principal for use with Fabric APIs and pipelines. This assumes you're using it for automation (like notebooks or pipelines) and need access to capacity or workspace-level resources.

✅ Step 1: Register the App (Service Principal) in Azure AD

1. Go to Azure Portal > Azure Active Directory > App registrations
2. Click New registration
3. Give it a name (e.g., fabric-sp)
4. Set the redirect URI to https://localhost (you can leave it blank if not needed)
5. Click Register

✅ Step 2: Assign API Permissions

1. In the app you just registered, go to API permissions
2. Click Add a permission > APIs my organization uses
3. Search for Power BI Service and select it
4. Add the following Application permissions:
   • Tenant.Read.All
   • Capacity.Read.All
5. Click Grant admin consent (must be done by a global admin)

✅ Step 3: Create a Client Secret

1. Go to Certificates & secrets
2. Click New client secret
3. Set an expiration and copy the value (you’ll need this for token generation)

✅ Step 4: Add the Service Principal to a Security Group (Optional but recommended)

1. Create a security group in Azure AD (e.g., fabric-api-access)
2. Add the service principal as a member
3. Use this group to manage access in Fabric

✅ Step 5: Assign Roles in Microsoft Fabric

1. Go to Microsoft Fabric Admin Portal
2. Under Tenant settings, make sure service principals are allowed
3. Go to Workspaces or Capacities
4. Add the service principal (or its security group) as:
   • Admin or Contributor on the workspace
   • Capacity Admin if needed

✅ Step 6: Generate a Token

Use a tool like Postman or a script to get a token:

• Token URL:
  https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/token

• Body (x-www-form-urlencoded):

  client_id: <your-app-id>
  client_secret: <your-client-secret>
  scope: https://analysis.windows.net/powerbi/api/.default
  grant_type: client_credentials

✅ Step 7: Test the API Call

Try calling a simple endpoint like:

GET https://api.powerbi.com/v1.0/myorg/capacities
Authorization: Bearer <your-access-token>

If this works, your setup is good.7