Git Integration with Fabric Workpsace

[PallaviReddy]

Hi,
Hope you are doing well!

I need to integrate Microsoft Fabric workspace with GitHub, which requires creating a GitHub Personal Access Token (PAT).Which PAT should I use. If I go on vacation and the PAT expires during that time, how can my team continue working without disruption? What is the recommended way to handle PAT expiration in such scenarios?Please help.

Thank you!

[v-karpurapud]

Hi @PallaviReddy 

Just checking in as we haven't received a response to our previous message. Were you able to review the information above? Let us know if you have any additional questions.

Thank You.

[v-karpurapud]

Thank you for contacting the Microsoft Fabric Community Forum.
 

Has your issue been resolved? If the responses from community members  @Cookistador  and @ibarrau  addressed your question, please let us know. This helps us make sure the solutions are useful for everyone.
 

I hope this clarifies things. Let me know what you find after trying these steps; I'm happy to assist further if needed.

Regards,

Microsoft Fabric Community Support Team.

[ibarrau]

Hi. In addition to what Cookistador is saying, we manage and excel of keys names and expiration date. We have a power bi connected to that with alerts. So when you are two weeks before an expire, it alerts the team. The rest, I agree with my fellow answer.

I hope that helps,

[Cookistador · Accepted solution]

Hello  @PallaviReddy
The easiest way to avoid this issue is to not go on holiday 🙂

But there is an alternative, first you should use a fine-grained token  (according to microsoft doc)

use a GitHub Service Account (Bot Account) with a generic email address like: fabric-git@yourcompany.com

Then generate the PAT from this account with the longer expiry date

Now all of your team member has to connect their workspace using that shared PAT

The benefits of this approach:

• PAT is not tied to any individual's vacation/departure
• Expiry is predictable and can be rotated by anyone with access to the bot account
• Auditable and revocable independently of any person