How can I automate partition creation in Azure Analysis Services without using SPN Certificates?

Anonymous

I am currently using a setup where I create partitions in Azure Analysis Services database tables using Automation Runbooks, where we connect to AAS using SPN Certificates. Since Azure will be discontinuing the use of Certificates for authentication from September 2023, I am searching for other ways to access the AAS model and perform operations like Database Backup and Partition Creation. AAS still doesn't have an option for authentication using Managed Identities, so is there any other way achieve this using something like Databricks (PyADOMD)/ Logic Apps/ Runbooks? Thanks in advance!

SwathiDhanwada-MSFT 17,556 Reputation points

2023-06-23T07:42:07.9266667+00:00

@Anonymous Did you get chance to look into my previous comment? Kindly revert if you have further questions.
SwathiDhanwada-MSFT 17,556 Reputation points

2023-06-25T20:29:03.4+00:00

@Anonymous Hope the information provided is useful.

If this answers your query, do click "Accept as Answer" and click "Yes" for the same, which might be beneficial to other community members reading this thread. If you need further assistance, please do provide additional information with the issue you are facing.

1 answer

SwathiDhanwada-MSFT 17,556 Reputation points

2023-06-22T04:15:03.5966667+00:00

@Anonymous Welcome to Microsoft Q & A Community Forum. As Azure Analysis Services doesn't support managed identities. I would suggest you take advantage of shared resources within automation account like credentials and certificates to connect with Azure Analysis Services.

Store the service principle as credential and connect to azure analysis service using it. On how to create credential asset and use it in runbook, you can refer to this document. For using certificate within runbook, you can refer this document.

If this answers your query, do click "Accept as Answer" and click "Yes" for the same, which might be beneficial to other community members reading this thread. If you need further assistance, please do provide additional information with the issue you are facing.
Please sign in to rate this answer.
Anonymous

2023-07-03T04:48:52.1033333+00:00

Thanks for the reply @SwathiDhanwada-MSFT ! I am using a similar method to achieve this right now. However, from what I know, Microsoft is retiring the "RunAsAccount" feature from September 2023. So my idea is that, I won't be able to regenerate the certificates and use it to access AAS anymore. Is there any other approach that we can use to solve this issue?

SwathiDhanwada-MSFT 17,556 Reputation points

2023-07-05T08:55:54.1566667+00:00

@Anonymous Yes, Microsoft is indeed retiring the RunAsAccount feature. The solution I have provided is similar to RunAsAccount. When RunAsAccount is created, it automatically creates the service principal and certificates and assigns Contributor role to the account. RunAsAccount automates the process of authentication. In the suggestion I provided, all the authentication process should be done manually. First you need to create your own service principal, then create service principal credentials and certificates. Store these credentials and certificates manually within automation account. Assign necessary permissions to service principal and use it within Azure automation for authentication.

For more information, refer this document.

Anonymous

2023-07-06T07:05:39.8966667+00:00

Hey @Swathi Dhanwada ; do you have any sample code for that? For e.g. sample code to Backup Database from Azure Analysis Services model?

SwathiDhanwada-MSFT 17,556 Reputation points

2023-07-06T12:06:29.1466667+00:00

@Shounak Mukund Sangli The document I have shared in my earlier comment contains step by step instructions for authenticating as well as sample scripts for performing actions on Azure Analysis Service. Kindly check if it is helpful for you.
Sign in to comment