Forum Discussion

MarkBurgess's avatar
MarkBurgess
Icon for Advocate I rankAdvocate I
1 year ago

Dataflow Gen2 lakehouse connection token expired

Hi, I have a Dataflow Gen2 that updates a Lakehouse table from an on-prem SQL database. There is a shared connection set up to the destination Lakehouse, but the only option for authentication is OAu...
Need Help
v-csrikanth's avatar
v-csrikanth
Icon for Community Support rankCommunity Support
1 year ago

Hi MarkBurgess 
Sorry for the late response. If you want to use the Service Principal please follow the below stpes to enable.

How to Check If Service Principal is Enabled (Without Being an Admin rights)

1: Try Adding a Service Principal in a Workspace

  • Open Power BI Service and go to your Fabric workspace.

  • Click on Settings → Access.

  • Try adding a Service Principal (by entering the App ID from Azure AD).

  • If you get an error or don’t see an option for Apps, it likely means Service Principal authentication is disabled.

2: Check in Dataflow Gen2

  • Go to your Dataflow Gen2 connection settings.

  • If Service Principal is not available in the authentication dropdown, it might not be enabled for your tenant.

3: Ask Your Fabric Admin to Verify

  • Since only Fabric Admins can change Tenant Settings, you can ask your Power BI Admin or Microsoft Fabric Admin to check:

    • Admin Portal → Tenant Settings → Dataflows and Datamarts

    • Look for "Allow Service Principal Authentication" and ensure it is enabled.

If the issue still persists, let us know i a happy to help you.

If the above information helps you, please give us a Kudos and marked the reply Accept as a Solution.

Thanks,
Cheri Srikanth

MarkBurgess's avatar
MarkBurgess
Icon for Advocate I rankAdvocate I
1 year ago

HI v-csrikanth 

 

Yes I can grant workspace access to service principals.

 

However when selecting a lakehouse destination in Dataflow Gen2, Organisational Account is the only option. 

 

 

Similarly if I create a lakehouse connection directly in the 'Manage Gateways and Connections' screen OAuth2 is the only option. 

 

I'm a Fabric admin and I can't see a "Allow Service Principal Authentication" option in the tenant settings. However we are using service principals for other connection types. It just doesn't seem to be an option in this case. 

 

Thanks

Mark