Forum Discussion

DimitraG's avatar
DimitraG
Frequent Visitor
1 year ago
Solved

Configure service principal for cloud data source e

Hello!
I'm looking for guidance on setting up a Cloud data source connection for semantic models to access my Lakehouse.

Specifically, I need help with the configuration to authenticate via a service principal. After creating the service principal, do I need to assign specific permissions or enable any settings for service principals to access Fabric APIs? Additionally, should the service principal be added to a security group? As my understanding the service principal should have contrivutor role in workspace .

Thanks in advance!

 
 
 
 
 
Need Help
Show and Tell
Tips and Tricks
  • GilbertQ's avatar
    GilbertQ
    1 year ago

    Hi DimitraG 

     

    Once you create a service principle, you should always add it to an Entra ID security group. You can then give that security group workspace permissions, which should then allow to read from the lakehouse.

  • v-sdhruv's avatar
    v-sdhruv
    1 year ago

    Hi DimitraG ,

    There are two types of authentication available for service principals:
    password-based authentication (application secret) and certificate-based authentication.
    But first you need Microsoft Entra ID.

    If you need help creating a service principal, you refer this link
    Register a Microsoft Entra app and create a service principal
    After creating Service principal you should add it to security group.
    You can Enable service principal authentication for admin APIs using these steps
    https://learn.microsoft.com/en-us/fabric/admin/enable-service-principal-admin-apis
    Hope this helps!
    If this answers your question, please Accept it as a solution and give it a 'Kudos' so others can find it easily.
    Thank you.

5 Replies

  • GilbertQ's avatar
    GilbertQ
    Super User
    1 year ago

    Hi DimitraG 

     

    Once you create a service principle, you should always add it to an Entra ID security group. You can then give that security group workspace permissions, which should then allow to read from the lakehouse.

  • v-sdhruv's avatar
    v-sdhruv
    Community Support
    1 year ago

    Hi DimitraG ,

    There are two types of authentication available for service principals:
    password-based authentication (application secret) and certificate-based authentication.
    But first you need Microsoft Entra ID.

    If you need help creating a service principal, you refer this link
    Register a Microsoft Entra app and create a service principal
    After creating Service principal you should add it to security group.
    You can Enable service principal authentication for admin APIs using these steps
    https://learn.microsoft.com/en-us/fabric/admin/enable-service-principal-admin-apis
    Hope this helps!
    If this answers your question, please Accept it as a solution and give it a 'Kudos' so others can find it easily.
    Thank you.

  • v-sdhruv's avatar
    v-sdhruv
    Community Support
    1 year ago

    Hi DimitraG ,
    Just wanted to check if you had the opportunity to review the information provided ?
     If the response has addressed your query, please accept it as a solution and give a 'Kudos' so other members can easily find it.
    Thank you.

  • v-sdhruv's avatar
    v-sdhruv
    Community Support
    1 year ago

    Hi @DimitraG ,
    Just wanted to check if you had the opportunity to review the information provided ?
     If the response has addressed your query, please accept it as a solution and give a 'Kudos' so other members can easily find it.
    Thank you

  • v-sdhruv's avatar
    v-sdhruv
    Community Support
    1 year ago

    Hi @DimitraG ,
    Just wanted to check if you had the opportunity to review the information provided ?
     If the response has addressed your query, please accept it as a solution and give a 'Kudos' so other members can easily find it.
    Thank you