Access OneLake Storage from Runbook

[jragan]

Hello,

I would like to write a CSV or Parquet directly into OneLake storage from a runbook.

I am using the following code in the runbook:

$ctx = New-AzStorageContext -StorageAccountName 'onelake' -UseConnectedAccount -endpoint 'fabric.microsoft.com' 
New-AzDataLakeGen2Item -Context $ctx -FileSystem $workspaceGUID -Path $uploadPath -Source $csvFilePath -Force

However I am receiving a 403 error that the user doesn't have access. I can't find a way to grant the managed identity for the automation account access to the workspace nor the datalake. I was able to wire up Azure Storage Explorer to the location however trying to add the managed identity to the ACL fails with an access error upon saving.

One additional note is that the Fabric Workspace in question is tied to a Trial Fabric license while we wait for Microsoft to figure out how to move our P1 capacity into a region that actually supports Fabric.

[GilbertQ]

Hi @jragan 

As far as I am aware, it is currently not supported to use managed identities or automation accounts into one lake. You might. be able to do this using your account, which I know is not great, but that is the only current workaround I am aware of.

[jragan · Accepted solution]

@GilbertQ After a lot of trial and error and following dark paths into rabbit holes, I came across this Post which highlights the new Tenant option to allow Service Principal Authentication.

once I enabled it and granted my Service Principal, the code in my OP executed perfectly.