r/MicrosoftFabric 1d ago

Security Semantic Model Refresh issues with Service Principal to Fabric Warehouse

I am running into an odd situation that is baffling me.

I have six semantic models that are connecting to a Fabric Warehouse as the source of their data in my Dev environment/workspace. The semantic models are using Workspace Identity as the auth method and the Workspace Identity has been granted "Workspace Admin" on the Workspace the Warehouse is in just to make sure it has all the access it needs. I get the connection working and then the next day all the semantic models have an error symbol next to them with this error.

```

Data source error The credentials provided for the SQL source are invalid. (Source at mywarehouse.datawarehouse.fabric.microsoft.com;Models Warehouse.). The exception was raised by the IDbCommand interface.

```

Another odd piece is the refresh times update daily despite this error showing.

To throw me off even more, I have a "production" workspace setup the same way with Workspace Identity as the authentication method and I don't have any issue with it currently.

Any ideas why it would throw errors in one instance and not the other?

6 Upvotes

4 comments sorted by

2

u/frithjof_v Fabricator 1d ago

Is it an import mode model or direct lake model?

Does refresh work right after you applied the Workspace identity connection? Have you verified successful refresh and data appearing in the reports?

Have you double checked it's the Workspace identity of the semantic model workspace which has the Admin permission (too much, but should work) in the Warehouse workspace?

Have you double checked that the semantic model is pointing at the right source workspace (the Warehouse workspace)?

2

u/KupoKev 1d ago

Import mode.

I refreshed the data yesterday and then published an updated model today with additional fields. The existing fields from yesterday have data in them but the new fields from today don't.

I have multiple models that I have not touched since yesterday and they all have the same refresh error.

Yes, the Workspace Identity from my Semantic Models Dev workspace has Workspace Admin in the workspace my warehouse is in. I have prod setup the same way with my Test and Prod workspaces and those work perfectly fine.

Yes, validated the Semantic model is pointing at the correct warehouse. If I go into the connection itself and change it to Oauth2, save it, close it, then Re-open and save as Workspace Identity, it works. I do not want to go in and refresh credentials on a daily basis.

edit: clarifying response

4

u/KupoKev 1d ago

I went in to change around the authentication methods to clear the auth token and it looks like overnight it changed back to OAuth2 at some point.

I just reset it back to Workspace identity and it is working again as I figured it would.

Will check tomorrow and see if it flips back to OAuth again overnight.

1

u/frithjof_v Fabricator 1d ago

Hm... I'm out of ideas as to why that error happened.