Forum Discussion

SauravRajJoshi's avatar
SauravRajJoshi
Frequent Visitor
2 years ago
Solved

Fabric GraphQL API with Microsoft App Registration Endpoint, with OAuth Access Token.

Is there a way to make Fabric GraphQL API work microsoft app registration endpoint, with access tokens and not user sign in. I have a Fabric GraphQL Api in my workspace. I need to expose the API out...
Need Help
SauravRajJoshi's avatar
SauravRajJoshi
Frequent Visitor
2 years ago

Hi rubayatyasmin ,

As I have mentioned above, the service principal is an admin in my fabric workspace, I have also added the same link above in my question, I have already followed along every step and given all of the permissions mentioned in the docs and forums.

 

The issues still persists.

govindarajan_d's avatar
govindarajan_d
Super User
2 years ago

SauravRajJoshi I think Stand alone Service Principals are not supported currently in GraphQL. You have to provide delegated permissions to the Service principal for it to access the data from the SQL endpoint. 

 

When you use delegated permissions, you must authenticate the service principal as well as the user. Read the below link to know more. 

 

 

https://learn.microsoft.com/en-us/entra/identity-platform/permissions-consent-overview#delegated-access-access-on-behalf-of-a-user

 

https://learn.microsoft.com/en-us/fabric/data-engineering/graphql-faq#does-the-api-for-graphql-client-application-require-access-to-the-data-source-in-order-to-perform-queries-or-mutations

 
  • Suerima's avatar
    Suerima
    Frequent Visitor
    1 year ago

    I want to try connecting applications to Fabric API for GraphQL. I'm unsure if the account used to create a GraphQL API in Fabric has to be the same as the Azure account used to create Microsoft Entra?