Sharing Lakehouse Table via SPN - How to test

[TePe]

Hi,

I need to share a single table from a Lakehouse via SQL endpoint with an external process. This should be done via a SPN (Service Principal) because we can't handle MFA etc. in this scenario.

So I created a SPN in Entra (AD), shared the Lakehouse, granted access to the table. So in theory I should be done. However, I'd like to test the access before I give it to the external party. Any idea how I can do it? I tried to connect to the SQL Endpoint using SSMS and the SPN credentials, it fails already when I try to connect to the Lakehouse, the login name (name of the SPN, tested it with and without @domain) wasn't found. Tried it with Power BI, same effect.

Any clue how I can test it?

Thanks.... 

[TePe]

Hi,

so what I did: I got into Entra ID, created the SPN and assigned a credential. Nothing else. 
Then I got into Fabric, shared the Lakehouse with the SPN without any special permissions, no checkmarks set here. This should give me access via SQL Endpoint only.

Finally I granted access to the table using a "GRAND SELECT ON table TO spn".

Now the question is how I can connect and check that everything is running... For that I got the URL of the SQL Endpoint from the Lakehouse settings and tried to connect with SSMS and Power BI without any luck, yet...

THANKS for your support!

[v-xuxinyi-msft]

Hi @TePe 

Have you set any roles for your Service Principal?

Best Regards,
Yulia Xu

[TePe]

...in other words: @v-xuxinyi-msft What roles should I set and how?

Thanks,

Thomas