Using fabric onelake as datasource for azure search service

[thanakornprom]

I was trying to connect OneLake to Azure AI Search as a data source for indexing. I created a resource on Azure, and as I went through the documentation, it suggested using the system-assigned identity, which I turned on. But when I tried to add this identity as a contributor to the workspace, it didn't work. I couldn't find the resource in the 'Manage Access' section, so I couldn't add the identity. I also read some older posts about similar issues, but they mentioned that OneLake wasn't supported as a direct data source at the time. However, when I checked now, it does support using OneLake as a direct data source. Can you please help me with this?

[v-ssriganesh]

Hi @thanakornprom,

May I ask if you have resolved this issue? If so, please mark the helpful reply and accept it as the solution. This will be helpful for other community members who have similar problems to solve it faster.

Thank you.

[thanakornprom]

Yes I have, as the blog suggest me in the first step to go to https://learn.microsoft.com/en-us/azure/search/search-how-to-index-onelake-files to setup the permission, which is where I'm currently stuck, as you can see below I've created the resource

but when I try to add the resource to Fabric workspace, it seem that it can't find the resource as seen below

thank for the quick reply.

[v-ssriganesh · Accepted solution]

Hi @thanakornprom,

Thank you for reaching out to the Microsoft fabric community forum! It looks like you're trying to use a system-assigned managed identity (MSI) for OneLake in Azure AI Search, but you're unable to manually add it as a contributor to your Fabric workspace.

System-assigned identities are tied to a single resource and do not have a traditional user account or email address, which is why you’re unable to manually add it under Manage Access. Instead, you need to assign the required Azure role-based access control (RBAC) permissions in Azure Portal.

Steps to Resolve:

• In your OneLake Identity settings (first screenshot), click on Azure role assignments. Assign the Contributor role to the system-assigned identity for the OneLake storage account.
• Additionally, if AI Search needs to read the data, assign the Storage Blob Data Contributor or Storage Blob Data Reader role.
• Since OneLake is now supported as a data source, ensure that the Azure AI Search service has the correct permissions to access the data.
• You can verify this by checking whether you can access OneLake files via Azure Storage Explorer or by testing a connection from Azure AI Search.

If this helps, then please Accept it as a solution and dropping a "Kudos" so other members can find it more easily.
Thank you.

[nilendraFabric]

Hello @thanakornprom 

Have you followed this https://techcommunity.microsoft.com/blog/azure-ai-services-blog/azure-ai-search-integration-with-fab...