Forum Discussion

jragan's avatar
jragan
Frequent Visitor
2 years ago
Solved

Access OneLake Storage from Runbook

Hello,

I would like to write a CSV or Parquet directly into OneLake storage from a runbook.

I am using the following code in the runbook:

 

$ctx = New-AzStorageContext -StorageAccountName 'onelake' -UseConnectedAccount -endpoint 'fabric.microsoft.com' 
New-AzDataLakeGen2Item -Context $ctx -FileSystem $workspaceGUID -Path $uploadPath -Source $csvFilePath -Force

 

However I am receiving a 403 error that the user doesn't have access. I can't find a way to grant the managed identity for the automation account access to the workspace nor the datalake. I was able to wire up Azure Storage Explorer to the location however trying to add the managed identity to the ACL fails with an access error upon saving.

 

One additional note is that the Fabric Workspace in question is tied to a Trial Fabric license while we wait for Microsoft to figure out how to move our P1 capacity into a region that actually supports Fabric.

  • jragan's avatar
    jragan
    2 years ago

    GilbertQ After a lot of trial and error and following dark paths into rabbit holes, I came across this Post which highlights the new Tenant option to allow Service Principal Authentication.

     

    once I enabled it and granted my Service Principal, the code in my OP executed perfectly. 

2 Replies

  • Hi jragan 

     

    As far as I am aware, it is currently not supported to use managed identities or automation accounts into one lake. You might. be able to do this using your account, which I know is not great, but that is the only current workaround I am aware of.

    • jragan's avatar
      jragan
      Frequent Visitor

      GilbertQ After a lot of trial and error and following dark paths into rabbit holes, I came across this Post which highlights the new Tenant option to allow Service Principal Authentication.

       

      once I enabled it and granted my Service Principal, the code in my OP executed perfectly.