Forum Discussion
Key Vault Reference Configuration
Hi SDHorita
Your Azure AD account needs Key Vault Secrets User (for secret retrieval) and Key Vault Reader (for vault discovery) roles on the Key Vault resource. Contributor and Secret Officer roles don’t grant these specific permissions
ensure Fabric’s system-assigned managed identity is granted Get and List permissions
Hi v-sgandrathi, so to confirm. In the picture below, this is the fabric managed identity you are talking about?
If not, where can I find the fabric managed identities?
Thanks again!
Hi Lars_Moons,
Yes, to confirm, the identity shown in your picture is the Fabric-managed identity we are referencing. This is the system-assigned managed identity automatically generated for your specific Fabric workspace.
This identity is used by Power BI/Fabric to securely authenticate when connecting to external services such as Azure Key Vault. You will need to assign the appropriate permissions (like "Get" and "List" for secrets) and roles (such as Key Vault Secrets User and Key Vault Reader) to this identity in your Key Vault’s Access Control (IAM) settings.
Thank you.