microsoft / microsoft/fabric-cli

[QUESTION] Command fab import - import: [FeatureNotAvailable] Access is forbidden. You do not have permission to access this resource

Open
#288 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

ai:question-triage:unable-to-process question
Dominant language
Python
Stars
173
Forks
63
Avg merge
2d 19h
Merged PRs (30d)
4

Description

Question

Hi,

What permissions are required for the service principal to use the fab import command to create and modify items, please?

Thanks

Context

Hi,
Using the following fab import command:
fab import "WF_SB_FS_DEV.Workspace/VL_Global.VariableLibrary" -i "$TMP_DIR/VL_Global.VariableLibrary" -f

I encounter the following error:
x import: [FeatureNotAvailable] Access is forbidden. You do not have permission to access this resource

I am experiencing the same issue with other item types (Notebook).
I do not understand why, but I get this error when creating a new item. However, when modifying an item that already exists in the target workspace, the fab import command successfully applies the changes.

I am using a service principal that is an Admin on the target workspace. In the Tenant Settings, the SPN is allowed for the following options:

  • Users can create Fabric items
  • Service principals can call Fabric public APIs
  • Service principals can access read-only admin APIs
  • Service principals can access admin APIs used for updates
  • And in the API permissions, it has Item.ReadWrite.All.

Could you please tell me what is missing from the service principal to allow it to modify items?

Thanks

fabric-cli version (if relevant)

1.7.0

Operating System (if relevant)

Linux

CLI Mode (if relevant)

Command line mode

Have you checked the documentation?
  • I have searched existing GitHub issues
  • I have reviewed the fabric-cli documentation
Additional Information

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the reported fab import command with fabric-cli 1.7.0, comparing creation with modification of an existing item. Review the service-principal and workspace permission requirements for Fabric item creation, then determine whether the behavior is expected or a CLI defect. Done means identifying the missing permission or documenting the confirmed limitation.

Written by the indexing model from the issue text.

Assessment

Tech stack
linux, python
Domain
api, authorization, cli
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.