Forum Discussion
kusto cross cluster join not work on Service
Hi Anonymous,
Thank you Shahid12523 again for your points.
In Power BI Service, running a cross-cluster query requires the engine to resolve the schema of the remote cluster as well. For OAuth authentication to work in this scenario, several conditions need to be met:
cross-cluster queries must be enabled at the Kusto level to establish trust between the primary and secondary clusters, and your OAuth identity (user or service principal) must have permissions on both clusters, typically at least the Database Viewer role. Additionally, if you’re using a service principal or managed identity for refresh, it must also be granted access to the remote cluster.
The reason it works in Desktop but fails in Service is because Desktop uses your local session token, but Service requires explicit permissions and cross-cluster trust. Once your admin enables cross-cluster querying and grants your OAuth identity access on the second cluster, the refresh should succeed.
Thank you.
Community SupportHi Anonymous,
Thank you Shahid12523 again for your points.
In Power BI Service, running a cross-cluster query requires the engine to resolve the schema of the remote cluster as well. For OAuth authentication to work in this scenario, several conditions need to be met:
cross-cluster queries must be enabled at the Kusto level to establish trust between the primary and secondary clusters, and your OAuth identity (user or service principal) must have permissions on both clusters, typically at least the Database Viewer role. Additionally, if you’re using a service principal or managed identity for refresh, it must also be granted access to the remote cluster.
The reason it works in Desktop but fails in Service is because Desktop uses your local session token, but Service requires explicit permissions and cross-cluster trust. Once your admin enables cross-cluster querying and grants your OAuth identity access on the second cluster, the refresh should succeed.
Thank you.
Community SupportHi Anonymous,
Since we haven't heard back from you yet, I'd like to confirm if you've successfully resolved this issue or if you need further help?If you still have any questions or need more support, please feel free to let us know. We are more than happy to continue to help you.
Thanks for the caring.
Is there instruction for `but Service requires explicit permissions and cross-cluster trust`?
Currently I was focusing on another project so I might try the solution later
- v-sgandrathi
Hi Anonymous,
Thank you for the update.
I understand you are currently occupied with another project and may try the solution later. Could you kindly share an ETA on when you might be able to look into this?
Thank you and continue using Microsoft Fabric Community Forum.