Forum Discussion

Anonymous's avatar
Anonymous
Not applicable
1 year ago
Solved

AAD Token Generation

Hi,   I need help regarding AAD token generation. As per suggestion, I have decoded token in jwt.ms . Refer screenshot for same. Getting "Tenant.ReadWrite.All" still getting 403 clusterdetails err...
Need Help
  • v-sgandrathi's avatar
    v-sgandrathi
    1 year ago

    Hi Anonymous,

    Thank you for your detailed input ibarrau.

    To confirm, the 403 error despite having Tenant.ReadWrite.All usually indicates a configuration issue. Please ensure that the "Embed content in apps" setting is enabled in the Fabric Admin Portal under Tenant Settings. If you're using a Master User approach, make sure Admin Consent has been granted for the Tenant.ReadWrite.All permission in Azure Active Directory. For Service Principal authentication, verify that the same permission is granted and that the "Service principals can call Fabric public APIs" setting is enabled in the Fabric Admin Portal. 

     

    Hope my suggestion gives you good idea, if you have any more questions, please feel free to ask we are here to help you.
    If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.

     

    Thank you.

     

     

ibarrau's avatar
ibarrau
Super User
1 year ago

Hi. First check that "Embed content in Apps" setting from the Fabric Admin Portal Tenant settings is enabled. Then, it depends on how you are using the credentials. If you are connecting with master users make sure the "Grant Admin Conset" has been applied to the Tenant.ReadWrite.All. If you are using Service Principal then you have to turned on "Service Principals can call Fabric public APIs" at Fabric Admin portal.

I hope that helps,