Forum Discussion
Helper IService Principal ( SPN ) CI/CD Support
Hi,
Which is the current status of Service Principal ( SPN ) Support in CI/CD context?
Can we use it to deploy / interact with items?
I'm seeing this list here: Item management - Microsoft Fabric REST APIs | Microsoft Learn but for example Warehouses seems that aren't supported both in Git Integration and Fabric Deployment Pipelines using it ...
{"requestId":"6c5dc799-f7ee-47ce-a6f6-3b920e99d7c8","errorCode":"BadRequest","moreDetails":[{"errorCode":"PrincipalTypeNotSupported","message":"The operation is not supported for the principal type","relatedResource":{"resourceType":"Warehouse"}}],"message":"The request could not be processed due to missing or invalid information"}Could be useful to have documentation pages that decribe where SPNs can be used ...
Regards,
Giulio
Hi giulio-diluca someone not so long ago reported the same issue and I replicate the same behavior and we both concludedad (and later confirm via MSFT) that Warehouses are still on the unsupported list of items deployable via SPNs 😒 ... in response, I also submited an idea, please vote in favor to get it implemented, click here 👉 Allow updateFromGit with Service Principal for wor... - Microsoft Fabric Community
In that topic, we also discussed and agreed how missleading is to see that you can create workspace via Fabric API (supported), but you can't via UpdateFromGit, that is, for workspace with Git-Integration! (make sense of that!) ... here's the discussion if you want to take a look Solved: REST Endpoint to "Update From Git" a Workspace Not... - Microsoft Fabric Community in particular, check the reply from @AntoineW where he describes quit well the distinction.
Well, hope this helps! Please vote for the idea 😁🤞 ... wish you the best of lucks, a thumbs up would be nice and even better to mark this as a solution. Cheers.
7 Replies
- svenchio
Super User
Hi giulio-diluca someone not so long ago reported the same issue and I replicate the same behavior and we both concludedad (and later confirm via MSFT) that Warehouses are still on the unsupported list of items deployable via SPNs 😒 ... in response, I also submited an idea, please vote in favor to get it implemented, click here 👉 Allow updateFromGit with Service Principal for wor... - Microsoft Fabric Community
In that topic, we also discussed and agreed how missleading is to see that you can create workspace via Fabric API (supported), but you can't via UpdateFromGit, that is, for workspace with Git-Integration! (make sense of that!) ... here's the discussion if you want to take a look Solved: REST Endpoint to "Update From Git" a Workspace Not... - Microsoft Fabric Community in particular, check the reply from @AntoineW where he describes quit well the distinction.
Well, hope this helps! Please vote for the idea 😁🤞 ... wish you the best of lucks, a thumbs up would be nice and even better to mark this as a solution. Cheers.
giulio-diluca
KevinChantI use the fabric-cicd Python library with SPN's fine. What are you looking to do?
- giulio-diluca
hi KevinChant
thank you for the response, don't know how it could work with fabric-cicd python considering that warehouse seems not supported by APIs but good to know 😀
v-pnaroju-msftCommunity Support
Thankyou, KevinChant and svenchio for your responses.
Hi giulio-diluca,
We appreciate your inquiry through the Microsoft Fabric Community Forum.
We would like to inquire whether have you got the chance to check the solutions provided by KevinChant and svenchioto resolve the issue. We hope the information provided helps to clear the query. Should you have any further queries, kindly feel free to contact the Microsoft Fabric community.
Thank you.- giulio-diluca
Hi v-pnaroju-msft
i'm looking for a more, comprehensive, documentation ( links ) about what is supported by SPN in terms of APIs REST, Git Integration, Fabric Deployment pipeline.
Probably looking in the documentation something can be found, if i look at this page for Fabric Deployment pipeline Overview of Fabric deployment pipelines - Microsoft Fabric | Microsoft Learn i can see that Warehouse is supported in preview but don't know if with SPN is supported for example.
Exists a documentation for Deployment Pipelines and Git Integrations where is clear where SPN can be used?
Regards,
Giulio
- v-pnaroju-msft
Thank you, KevinChant and svenchio for your responses.
Hi giulio-diluca,
Thank you for the followup and for voting on the idea.
Based on my understanding, there is no single consolidated document that clearly maps Service Principal (SPN) support across Fabric REST APIs, Git Integration, and Deployment Pipelines. SPN support is operation specific rather than item centric. While Service Principals may be supported for some Fabric REST APIs, support depends on the specific item and operation, and Warehouses are not supported. Hence, errors such as PrincipalTypeNotSupported are expected.
For Git Integration, SPNs are not supported for operations such as UpdateFromGit (user delegated authentication is required), although workspace creation via APIs is permitted. Regarding Deployment Pipelines, the “Supported items” list (where Warehouses appear in preview) reflects item availability only and does not imply SPN compatibility.
Voting on(as you have done) and tracking the Ideas request is the correct course of action.
Additionally, please refer to the links provided below:
Automate git integration with a service principal in Azure DevOps - Microsoft Fabric | Microsoft Learn
Source Control with Fabric Data Warehouse (Preview) - Microsoft Fabric | Microsoft Learn
Network security for continuous integration/continuous deployment - Microsoft Fabric | Microsoft Learn
Automate Git integration by using APIs - Microsoft Fabric | Microsoft Learn
Git Integration with Service Principal - Microsoft Fabric | Microsoft LearnWe hope the information furnished helps to resolve the issue. Should you have any further queries, please feel free to contact the Microsoft Fabric community.
Thank you.