Configure service principal for cloud data source e

[DimitraG]

Hello!
I'm looking for guidance on setting up a Cloud data source connection for semantic models to access my Lakehouse.

Specifically, I need help with the configuration to authenticate via a service principal. After creating the service principal, do I need to assign specific permissions or enable any settings for service principals to access Fabric APIs? Additionally, should the service principal be added to a security group? As my understanding the service principal should have contrivutor role in workspace .

Thanks in advance!

[GilbertQ · Accepted solution]

Hi @DimitraG 

Once you create a service principle, you should always add it to an Entra ID security group. You can then give that security group workspace permissions, which should then allow to read from the lakehouse.

[v-sdhruv]

Hi @DimitraG ,
Just wanted to check if you had the opportunity to review the information provided ?
 If the response has addressed your query, please accept it as a solution and give a 'Kudos' so other members can easily find it.
Thank you

[v-sdhruv]

Hi @DimitraG ,
Just wanted to check if you had the opportunity to review the information provided ?
 If the response has addressed your query, please accept it as a solution and give a 'Kudos' so other members can easily find it.
Thank you

[v-sdhruv]

Hi @DimitraG ,
Just wanted to check if you had the opportunity to review the information provided ?
 If the response has addressed your query, please accept it as a solution and give a 'Kudos' so other members can easily find it.
Thank you.

[v-sdhruv · Accepted solution]

Hi @DimitraG ,

There are two types of authentication available for service principals:
password-based authentication (application secret) and certificate-based authentication.
But first you need Microsoft Entra ID.

If you need help creating a service principal, you refer this link
Register a Microsoft Entra app and create a service principal
After creating Service principal you should add it to security group.
You can Enable service principal authentication for admin APIs using these steps
https://learn.microsoft.com/en-us/fabric/admin/enable-service-principal-admin-apis
Hope this helps!
If this answers your question, please Accept it as a solution and give it a 'Kudos' so others can find it easily.
Thank you.

[GilbertQ · Accepted solution]

Hi @DimitraG 

Once you create a service principle, you should always add it to an Entra ID security group. You can then give that security group workspace permissions, which should then allow to read from the lakehouse.