Trouble with deletating setting (Certification) to Domain admin

[Anonymous]

I'm a Fabric admin and I'm trying to delegate certification settings to domain admins.

When I try to add a security group that should be able to certify items within their domain, I receive the error message below "Delegated setting could not be applied":

The group I'm adding is a domain admin group as well. Am I doing something wrong, or is this a bug?

[v-tsaipranay]

Hi @Anonymous ,

We are following up once again regarding your query. Could you please confirm if the issue has been resolved through the support ticket with Microsoft?

If the issue has been resolved, we kindly request you to share the resolution or key insights here to help others in the community. If we don’t hear back, we’ll go ahead and close this thread.

Should you need further assistance in the future, we encourage you to reach out via the Microsoft Fabric Community Forum and create a new thread. We’ll be happy to help.

Thank you.

[v-tsaipranay]

Hi @Anonymous ,

Thank you for posting in the Microsoft Fabric Community.

This issue could be due to several reasons. Fabric requires an Azure Active Directory (AAD) security group for certification delegation. If the domain admin group isn’t an AAD security group, please create a new AAD group, add the domain admins to it, and try again.

Additionally, the "Try again later" message suggests a possible temporary glitch. In this case, wait a few minutes and retry the change. Lastly, ensure that your Fabric admin role has the necessary permissions to delegate certification settings in the Admin Portal.

I hope this will resolve your issue, if you need any further assistance, feel free to reach out.

If this post helps, then please give us Kudos and consider Accept it as a solution to help the other members find it more quickly.

Thankyou.

[Anonymous]

Thanks for your response @v-tsaipranay 

The group I've tried with was a "Mail-enabled security group". 

I have also tried to remove the AD-group, and just turn of the certification. I have also tried to delegate this setting for an other Fabric Tenant. Receiving the same issue.

[v-tsaipranay · Accepted solution]

Hello @Anonymous ,

Thanks for the update! Since you are using a Mail-enabled security group, this could be the root cause. Fabric delegation settings often require a regular Azure AD Security Group (not mail-enabled).

Create a new regular security group (without mail-enabled settings) in Azure AD and add the required users. Then, try delegating the certification setting again.

Double-check that your Fabric admin role has permission to delegate settings. You can review this in the Fabric Admin Portal under Tenant settings > Certification.
Since you’ve tested in another tenant and received the same issue, this might be a broader Fabric limitation or bug.

If the issue persists, consider raising a support ticket with Microsoft Fabric for further investigation. Please use the following link as a guide for raising the support ticket:

How to create a Fabric and Power BI Support ticket - Power BI | Microsoft Learn

If this post helps, then please give us Kudos and consider Accept it as a solution to help the other members find it more quickly.

Thankyou.

[v-tsaipranay]

Hello @Anonymous ,

Could you please confirm if the issue has been resolved after raising a support case? If a solution has been found, it would be greatly appreciated if you could share your insights with the community. This would be helpful for other members who may encounter similar issues.

Thank you for your understanding and assistance.

[v-tsaipranay]

Hi @Anonymous ,

I wanted to check if you had the opportunity to review the information provided. Please feel free to contact us if you have any further questions. If my response has addressed your query, please accept it as a solution and give a 'Kudos' so other members can easily find it.

Thank you.