Getting Forbidden error when accessing lakehouse files from Azure app service

[Anonymous]

Hello Everyone,

I have a lakehouse and azure app service. Here am trying to download files from Azure app services from Lakehouse files via 

DataLakeServiceClient package with Managed Identity. But am recieveing Forbidden Error as below. But I have given admin permissions to Managed Identity in workspace and lake house permissions as well. Could you pleasae help on this?

'<<workspaceid>>', artifact '<artifactid>>'.
Status: 403 (Forbidden)
ErrorCode: Forbidden

Content:
<?xml version="1.0" encoding="utf-8"?>
<Error>
<Code>Forbidden</Code>
<Message>User is not authorized to perform current operation for workspace <<workspaceid>>', artifact '<artifactid>>.</Message>
</Error>

Headers:
Transfer-Encoding: chunked
Server: Microsoft-HTTPAPI/2.0
x-ms-error-code: Forbidden
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: REDACTED
Access-Control-Allow-Methods: REDACTED
Access-Control-Expose-Headers: REDACTED
Strict-Transport-Security: REDACTED
X-Content-Type-Options: REDACTED
x-ms-root-activity-id: REDACTED
Date: Wed, 16 Apr 2025 17:26:02 GMT
Content-Type: application/xml

at Azure.Storage.Blobs.BlobRestClient.DownloadAsync(String snapshot, String versionId,

[Anonymous]

Hi @Anonymous,

As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided for the issue worked? or Let us know if you need any further assistance?
If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.

Regards,
Vinay Pabbu

[Anonymous]

Hi @Anonymous,

May I ask if you have gotten this issue resolved?

If it is solved, please mark the helpful reply or share your solution and accept it as solution, it will be helpful for other members of the community who have similar problems as yours to solve it faster.

Regards,
Vinay Pabbu

[Anonymous]

Hi @SarikaBirkur,

As we haven’t heard back from you, we wanted to kindly follow up to check if the solution provided for the issue worked? or Let us know if you need any further assistance?
If our response addressed, please mark it as Accept as solution and click Yes if you found it helpful.

Regards,
Vinay Pabbu

[Anonymous · Accepted solution]

Hi @Anonymous,

Thank you for reaching out to Microsoft Fabric Community Forum.

Error 403 (Forbidden) is typically an access issue. This occurs because the app’s managed identity lacks Storage Blob Data Reader access on the underlying OneLake storage. Even with workspace and lakehouse permissions, storage-level access is also required. Assigning this role in Azure should resolve the issue.

If this post helps, then please consider Accepting as solution to help the other members find it more quickly, don't forget to give a "Kudos" – I’d truly appreciate it!

Regards,
Vinay Pabbu