Azure Logic Apps HTTP Unauthorized

Question

i tried to run a pipline in azure synapse analytics after a blob is added or modified but i get 'Unauthorized' error
i used identity managed as authentification type and i turned on the the system assigned in identity in logic app and i gave synapse contributor role to my logic app in synapse workspace
any help please ?

Answer 1

Hi Mohamed Alaa LAABIDI,

Thanks for reaching out to Microsoft Q&A.

Check If all these configurations seem correct and if you're still facing the issue, you might try enabling diagnostic logging for both the LogicApp and Synapse to gather more detailed information about the cause of the unauthorized error.

1. Managed Identity Configuration:
   • Ensure that the system-assigned managed identity for the Logic App is indeed turned on.
   • Verify that the managed identity has been granted the "Synapse Contributor" role on the Synapse workspace.
2. Permissions :
   • Sometimes, it takes a few minutes for permissions to propagate after assigning a role. Ensure that enough time has passed since you assigned the "Synapse Contributor" role.
3. API Permissions:
   • Double-check that the Synapse workspace's ACL settings allow the Logicapp to interact with it. This includes ensuring the managed identity has sufficient access.
4. Check the Endpoint:
   • Ensure that the URI is correct, especially the subscription, resource group, and workspace names. Any typo can lead to an unauthorized error.
5. Test the MI:
   • Try accessing the Synapse workspace using a tool like Postman with the managed identity token to verify that the token has the required permissions.

Please 'Upvote'(Thumbs-up) and 'Accept' as an answer if the reply was helpful. This will benefit other community members who face the same issue.