AAS refresh failure via ADF

Question

HI All,

I am following the below blog to process AAS via managed identity:
https://medium.com/ricoh-digital-services/process-azure-analysis-services-models-with-azure-data-factory-v2-d7c6288f352c

The only change that i implemented is rather than providing the ADF individual access, i added that ADF within an AD group and added that AD Group as Analysis service admin, similar to the below blog initial step:
https://datasharkx.wordpress.com/2022/10/31/copy-data-from-power-bi-through-azure-data-factory-synapse-pipeline-part-3/

I am getting Unauthorized access when adding the ADF via AD Group but it is working properly when the ADF is explicitly added as AAS Admin.

The same aspect is happening via Service Principal authentication as well.

Any reason why managed identity is work fine via group aspect in PowerBI refresh and not working for AAS refresh?

Why is there an explicit need to add the individual users and not propagated via AD group?

Answer 1

Hi @Priya Jha ,

Thank you for posting query in Microsoft Q&A Platform.

Usually, Unauthorized access error will come when the identity which is getting used will not have sufficient permissions to perform task.

In case of PowerBI the setting explicitly called out to use security groups. Hence there we should use security groups only. Please check below screenshot.

In case of AAS kindly consider adding managed Identity itself as AAS admin.

Hope this helps. Please let me know for any queries.

---

Please consider hitting Accept Answer button. Accepted answers help community as well.