Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
1 year ago
Solved

Getting Forbidden error when accessing lakehouse files from Azure app service

Hello Everyone,

 

I have a lakehouse and azure app service. Here am trying to download files from Azure app services from Lakehouse files via 

DataLakeServiceClient package with Managed Identity. But am recieveing Forbidden Error as below. But I have given admin permissions to Managed Identity in workspace and lake house permissions as well. Could you pleasae help on this?
 

'<<workspaceid>>', artifact '<artifactid>>'.
Status: 403 (Forbidden)
ErrorCode: Forbidden

Content:
<?xml version="1.0" encoding="utf-8"?>
<Error>
<Code>Forbidden</Code>
<Message>User is not authorized to perform current operation for workspace <<workspaceid>>', artifact '<artifactid>>.</Message>
</Error>

Headers:
Transfer-Encoding: chunked
Server: Microsoft-HTTPAPI/2.0
x-ms-error-code: Forbidden
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: REDACTED
Access-Control-Allow-Methods: REDACTED
Access-Control-Expose-Headers: REDACTED
Strict-Transport-Security: REDACTED
X-Content-Type-Options: REDACTED
x-ms-root-activity-id: REDACTED
Date: Wed, 16 Apr 2025 17:26:02 GMT
Content-Type: application/xml

at Azure.Storage.Blobs.BlobRestClient.DownloadAsync(String snapshot, String versionId,

one lake
workspaces
  • Anonymous's avatar
    Anonymous
    1 year ago

    Hi Anonymous,

     

    Thank you for reaching out to Microsoft Fabric Community Forum.

     

    Error 403 (Forbidden) is typically an access issue. This occurs because the app’s managed identity lacks Storage Blob Data Reader access on the underlying OneLake storage. Even with workspace and lakehouse permissions, storage-level access is also required. Assigning this role in Azure should resolve the issue.

     

    If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it!


    Regards,
    Vinay Pabbu

4 Replies

  • Anonymous's avatar
    Anonymous
    Not applicable
    1 year ago

    Hi Anonymous,

     

    Thank you for reaching out to Microsoft Fabric Community Forum.

     

    Error 403 (Forbidden) is typically an access issue. This occurs because the app’s managed identity lacks Storage Blob Data Reader access on the underlying OneLake storage. Even with workspace and lakehouse permissions, storage-level access is also required. Assigning this role in Azure should resolve the issue.

     

    If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it!


    Regards,
    Vinay Pabbu

  • Anonymous's avatar
    Anonymous
    Not applicable
    1 year ago

    Hi Anonymous,

     

    As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided for the issue worked? or Let us know if you need any further assistance?
    If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.

     

    Regards,
    Vinay Pabbu

    • Anonymous's avatar
      Anonymous
      Not applicable
      1 year ago

      Hi Anonymous,

       

      May I ask if you have gotten this issue resolved?

      If it is solved, please mark the helpful reply or share your solution and accept it as solution, it will be helpful for other members of the community who have similar problems as yours to solve it faster.


      Regards,
      Vinay Pabbu

      • Anonymous's avatar
        Anonymous
        Not applicable
        1 year ago

        Hi @SarikaBirkur,

         

        As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided for the issue worked? or Let us know if you need any further assistance?
        If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.

         

        Regards,
        Vinay Pabbu