Fabric Data agent connection issue with Foundry AI Agents

[HemanthGubbala]

Hi, We have created a fabri data Agent and got the workspace and ai skills ID. Using the creds we have linked the Fabric Agent to AI Agents in Azure Foundry. When sending any user query it is unable to retrieve the data from Fabric agents Getting below error:
.

Please let me know the fix

[HemanthGubbala]

Hi @v-achippa ,

Thank you for the response.

Can you please elaborate on how can I check the same.

- The service principle account is linked to my Workspace in fabric at contributor level. We did not link it with any client secret.

- Can you please tell how does Service principal account plays a key role here?.

Thanks

[v-achippa]

Hi @HemanthGubbala,

The service principal is the identity that Foundry uses to sign in to Microsoft Fabric without a human user. When foundry calls fabric, it first requests an Azure AD access token on behalf of that service principal. So for Azure AD to issue a token in the client credentials flow, the service principal must present a credential like a client secret or a certificate.

• To check this, in the Azure Portal, go to Azure Active Directory --> App registrations --> find the app representing your service principal --> Certificates & secrets.
• If there is no client secret and no certificate or federated credential listed, then it has no way to sign in using client secret flow.
• So for the fix, create a new client secret, click on New client secret, give it a name, set an expiry and click Add. Now copy the value immediately (you will not see it again).
• Update the Foundry AI Agent with Application(client) ID, Tenant ID and the new client secret value. Save it and re run the query.
• Also confirm the same SP has Contributor on the Fabric workspace.

If you already use certificates or federated credentials instead of a secret, make sure that the Foundry is configured to use that method. Or else add a client secret for the quick solution.

Thanks and regards,

Anjan Kumar Chippa

[HemanthGubbala]

Hi @v-achippa  Thanks for the solution. Can you please let me know the process for below point mentioned:

• Update the Foundry AI Agent with Application(client) ID, Tenant ID and the new client secret value. Save it and re run the query.

[v-achippa · Accepted solution]

Hi @HemanthGubbala,

Thank you for the response, please follow below steps:

• In the Azure AI Foundry portal, open your project. Go to the Management center --> Connected resources. This shows all the configured external connections including Microsoft Fabric or OneLake.
• Find your Fabric(or OneLake) connection and then click Edit (if edit is supported).
• In the configuration form, update the Tenant ID i.e your Tenant ID, Application (Client) ID i.e your SP Client ID, Client Secret i.e newly generated secret value.
• Click Save and now re-run the query.
• Make sure the same SP has Contributor role on the Fabric workspace, this is mandatory for both authentication and data access to function correctly.

FYI please refer below document:

https://learn.microsoft.com/en-us/azure/ai-foundry/how-to/connections-add?tabs=aoai%2Cblob%2Cserp&pi...

Thanks and regards,

Anjan Kumar Chippa

[HemanthGubbala]

Hi @v-achippa ,

As said by I dont find any parameters which accepts Client ID, Client Secret etc. We only have the option to add the Workspace Id and the artifact ID for the connection of Fabric.

[v-achippa]

Hi @HemanthGubbala,

As we haven’t heard back from you, we wanted to kindly follow up to check if the solution I have provided for the issue worked? or let us know if you need any further assistance.

Thanks and regards,

Anjan Kumar Chippa

[v-achippa]

Hi @HemanthGubbala,

We wanted to kindly follow up to check if the solution I have provided for the issue worked? or let us know if you need any further assistance.

Thanks and regards,

Anjan Kumar Chippa

[v-achippa]

Hi @HemanthGubbala,

Thank you for reaching out to Microsoft Fabric Community.

The error here is likely the Fabric data agent cannot authenticate with the credentials provided to Azure Foundry. Please follow below steps:

• Please rotate the client secret for the Azure AD application(service principal) linked to your Fabric data agent and then update the new secret in the Foundry AI Agent configuration.
• Also make sure the same Azure AD application/service principal has at least Contributor role on the Fabric workspace where the data agent is created.

Thanks and regards,

Anjan Kumar Chippa

[v-achippa]

Hi @HemanthGubbala,

As we haven’t heard back from you, we wanted to kindly follow up to check if the solution I have provided for the issue worked? or let us know if you need any further assistance.

Thanks and regards,

Anjan Kumar Chippa