> For the complete documentation index, see [llms.txt](https://docs.ovaledge.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ovaledge.com/release8.2/connectors/connector-repositories/file-connectors/microsoft-fabric-onelake.md).

# Microsoft Fabric OneLake

This article outlines the integration with the Microsoft Fabric OneLake connector, enabling streamlined metadata management through features such as crawling, sample profiling, data preview, manual lineage, and Data Quality.

This connector establishes connectivity to Microsoft Fabric OneLake using the OneLake SDK to retrieve metadata from workspaces, Lakehouses, folders, and supported file formats. It authenticates using a Microsoft Entra ID Service Principal (Tenant ID, Client ID, and Client Secret) and connects through the configured OneLake Blob endpoint to access supported Microsoft Fabric resources.

<div align="left"><img src="/files/M7QDkeQe9qKQAG5mQ5z6" alt="" height="293" width="624"></div>

## Overview

### Connector Details

| Connector Category                                                                           | File Connectors      |
| -------------------------------------------------------------------------------------------- | -------------------- |
| OvalEdge Releases Supported                                                                  | Release8.2 and later |
| <p>Connectivity</p><p>\[How the connection is established with Microsoft Fabric OneLake]</p> | OneLake SDK          |

### Connector Features

<table data-search="false"><thead><tr><th>Feature</th><th align="center">Availability</th></tr></thead><tbody><tr><td>Crawling</td><td align="center">✅</td></tr><tr><td>Delta Crawling</td><td align="center">❌</td></tr><tr><td>Profiling*</td><td align="center">❌</td></tr><tr><td>Sample Profiling</td><td align="center">✅</td></tr><tr><td>Query Sheet</td><td align="center">❌</td></tr><tr><td>Data Preview</td><td align="center">✅</td></tr><tr><td>Auto Lineage</td><td align="center">❌</td></tr><tr><td>Manual Lineage</td><td align="center">✅</td></tr><tr><td>Secure Authentication via Credential Manager</td><td align="center">✅</td></tr><tr><td>Data Quality</td><td align="center">❌</td></tr><tr><td>DAM (Data Access Management)</td><td align="center">❌</td></tr><tr><td>Bridge</td><td align="center">✅</td></tr></tbody></table>

{% hint style="info" %}
\*Full profiling is supported through DuckDB. To enable this capability, configure the system setting (**enable.duckdb**) to **True**. When enabled, the File Data tab displays only the first 100 rows from the source file.
{% endhint %}

### Metadata Mapping

The following objects are crawled from Microsoft Fabric OneLake and mapped to the corresponding UI assets.

<table><thead><tr><th width="151">OneLake Object</th><th width="169">OneLake Attribute</th><th width="170">OvalEdge Attribute</th><th width="173">OvalEdge Category</th><th width="148">OvalEdge Type</th></tr></thead><tbody><tr><td>File/ Folder</td><td>Worlspace/Lakehouse/Folder</td><td>Folder</td><td>Folder</td><td>Folder</td></tr><tr><td>File/ Folder</td><td>Worlspace/Lakehouse/Folder/File</td><td>File</td><td>File</td><td>File</td></tr><tr><td>File</td><td>XLSX(sheets)</td><td>File(subfile)</td><td>File(subfile)</td><td>File(subfile)</td></tr><tr><td>File</td><td>XLS(sheets)</td><td>File(subfile)</td><td>File(subfile)</td><td>File(subfile)</td></tr><tr><td>File</td><td>CSV</td><td>File</td><td>File</td><td>File</td></tr><tr><td>File</td><td>TXT</td><td>File</td><td>File</td><td>File</td></tr><tr><td>File</td><td>PARQUET</td><td>File</td><td>File</td><td>File</td></tr><tr><td>File</td><td>ORC</td><td>File</td><td>File</td><td>File</td></tr><tr><td>File</td><td>JSON</td><td>File</td><td>File</td><td>File</td></tr><tr><td>File</td><td>YAML</td><td>File</td><td>File</td><td>File</td></tr><tr><td>File</td><td>PIP</td><td>File</td><td>File</td><td>File</td></tr><tr><td>File</td><td>YML</td><td>File</td><td>File</td><td>File</td></tr><tr><td>File</td><td>AVRO</td><td>File</td><td>File</td><td>File</td></tr><tr><td>File</td><td>SQL</td><td>File</td><td>File</td><td>File</td></tr><tr><td>File</td><td>XML</td><td>File</td><td>File</td><td>File</td></tr></tbody></table>

## Set up a Connection

### Prerequisites

The following are the prerequisites to establish a connection:

Ensure that the CSV files follow the required formatting standards for proper data processing and visibility. Refer to [CSV Format Requirements](https://docs.ovaledge.com/connectors/additional-requirements/csv-format-requirements-for-file-connectors)**.**

#### **Service Account User Permissions**

{% hint style="warning" %}
It is recommended to use a dedicated service account to establish the connection to the data source, configured with the following minimum set of permissions.
{% endhint %}

{% hint style="info" %}
**👨‍💻 Who can provide these permissions?** These permissions are typically granted by the Microsoft Fabric OneLake administrator, as users may not have the required access to assign them independently.
{% endhint %}

<table><thead><tr><th width="194">Operation</th><th width="180">Objects</th><th width="514">Access Permission</th></tr></thead><tbody><tr><td>Connector Validation</td><td>Fabric Workspace</td><td>Member or Contributor workspace role</td></tr><tr><td>Crawling</td><td>Folders</td><td>Read permission with Member or Contributor workspace role</td></tr><tr><td>Crawling</td><td>Files</td><td>Read permission with Member or Contributor workspace role</td></tr><tr><td>View Data</td><td>Files and Folders</td><td>Read permission with Member or Contributor workspace role</td></tr></tbody></table>

{% hint style="warning" %}
Enable **Service principals can use Fabric APIs** in the Microsoft Fabric tenant before configuring the connector.
{% endhint %}

{% hint style="info" %}

* Add the Microsoft Entra ID application to each target Microsoft Fabric workspace with the Member or Contributor role.
* When using Service Principal authentication, assign the required Azure Storage permissions to the Microsoft Entra ID application.
  {% endhint %}

### Connection Configuration Steps

{% hint style="info" %}
Users are required to have the Connector Creator role in order to configure a new connection.
{% endhint %}

1. Log into OvalEdge, go to **Administration > Connectors**, click **+ (New Connector),** search for **Microsoft Fabric OneLake**, and complete the required parameters.

{% hint style="info" %}
Fields marked with an asterisk (\*) are mandatory for establishing a connection.
{% endhint %}

<table><thead><tr><th width="220">Field Name</th><th>Description</th></tr></thead><tbody><tr><td>Connector Type</td><td>By default, "Microsoft Fabric OneLake" is displayed as the selected connector type.</td></tr><tr><td>Credential Manager*</td><td><p>Select the desired credentials manager from the drop-down list. Relevant parameters will be displayed based on your selection.</p><p>Supported Credential Managers:</p><ul><li>OE Credential Manager</li><li>AWS Secrets Manager</li><li>HashiCorp Vault</li><li>Azure Key Vault</li></ul><p>For more details, click <a href="https://docs.ovaledge.com/release8.2/connectors/additional-requirements/credential-manager-configuration">here</a>.</p></td></tr><tr><td>Connector Environment</td><td>Select the environment (Example: PROD, STG) configured for the connector.<br>For more details, click <a href="https://docs.ovaledge.com/release8.2/connectors/introduction-to-connectors/setup-and-connectivity/prerequisites#connector-environment">here</a>.</td></tr><tr><td>Connector Name*</td><td><p>Enter a unique name for the Microsoft Fabric OneLake connection              </p><p>(Example: "Fabric_Onelake").</p></td></tr><tr><td>Connector description</td><td>Enter a brief description of the connector.</td></tr><tr><td>Tenant Id*</td><td>Enter the Microsoft Entra ID Tenant ID (Directory ID) associated with the registered application. This identifier is used to authenticate the connector with Microsoft Entra ID.</td></tr><tr><td>Client Id*</td><td>Enter the Microsoft Entra ID Client ID (Application ID) of the registered application. This identifier uniquely identifies the application used for authentication.</td></tr><tr><td>Client Secret*</td><td>Enter the Client Secret associated with the registered application. This secret is used to authenticate the application and obtain access tokens from Microsoft Entra ID.</td></tr><tr><td>OneLake Blob endpoint*</td><td>Enter the OneLake Blob endpoint URL of the Microsoft Fabric workspace or Lakehouse. This endpoint is used to establish connectivity and access supported files and folders stored in OneLake.</td></tr></tbody></table>

<table data-header-hidden data-search="false"><thead><tr><th width="220.3636474609375"></th><th></th></tr></thead><tbody><tr><td><strong>Default Governance Roles</strong></td><td></td></tr><tr><td>Default Governance Roles*</td><td>Select the appropriate users or teams for each governance role from the drop-down list. All users and teams configured in OvalEdge Security are displayed for selection.</td></tr><tr><td><strong>Admin Roles</strong></td><td></td></tr><tr><td>Admin Roles*</td><td>Select one or more users from the dropdown list for Integration Admin and Security &#x26; Governance Admin. All users configured in OvalEdge Security are available for selection.</td></tr><tr><td><strong>No of Archive Objects</strong></td><td></td></tr><tr><td>No Of Archive Objects*</td><td><p>This shows the number of recent metadata changes to a dataset at the source. By default, it is off. To enable it, toggle the Archive button and specify the number of objects to archive.</p><p>Example: Setting it to 4 retrieves the last four changes, displayed in the 'Version' column of the 'Metadata Changes' module.</p></td></tr><tr><td><strong>Bridge</strong></td><td></td></tr><tr><td>Select Bridge*</td><td><p>If applicable, select the bridge from the drop-down list.</p><p>The drop-down list displays all active bridges configured in OvalEdge. These bridges enable communication between data sources and OvalEdge without altering firewall rules.</p></td></tr></tbody></table>

2. After entering all connection details, the following actions can be performed:
   1. Click **Validate** to verify the connection.
   2. Click **Save** to store the connection for future use.
   3. Click **Save & Configure** to apply additional settings before saving.
3. The saved connection will appear on the Connectors home page.

## Manage Connector Operations

### Crawl/Profile

{% hint style="info" %}
To perform crawl operations, users must be assigned the Integration Admin role.
{% endhint %}

1. Navigate to the **Connectors** page and click **Crawl/Profile.**
2. This action initiates the metadata collection process from the data source and loads the retrieved metadata into the **File Manager > File Explorer.**
3. After a successful crawl, only the first-level folders and files are displayed in the File Manager tab under the specified connection name. To access inner-level folders or files, navigate through the folder hierarchy and perform the required operations.
4. In the File Manager, click the connector name, select the specific **folder(s) or file(s)**, then click **Catalog / Catalog and Profile** from the **Nine Dots** menu. For more details, click [here](https://docs.ovaledge.com/file-manager/file-explorer).
5. The selected files or folders will be added to the **Data Catalog > Files/File Columns** tab.

{% hint style="info" %}
Profiling is supported only at the individual file level. To perform profiling, select the required file in the File Manager and use the Nine Dots menu to run the profiling operation. File columns become available only after the profiling process has been successfully completed.
{% endhint %}

#### Other Operations

The **Connectors** page in OvalEdge provides a centralized view of all configured connectors, including their health status.

**Managing connectors includes:**

* **Connectors Health:** Displays the current status of each connector using a **green** icon for active connections and a **red** icon for inactive connections, helping to monitor the connectivity with data sources.
* **Viewing:** Click the **Eye** icon next to the connector name to view connector details.

**Nine Dots Menu Options:**

To view, edit, validate, configure, or delete connectors, click on the **Nine Dots** menu.

* **Edit Connector:** Update and revalidate the data source.
* **Validate Connector:** Check the connection's integrity.
* **Settings:** Modify connector settings.
  * **Crawler:** Configure data extraction.
  * **Access Instructions:** Add notes on how data can be accessed.
  * **Business Glossary Settings:** Manage term associations at the connector level.
  * **Anomaly Detection Settings**: Configure anomaly detection preferences at the connector level.
* **Delete Connector:** Remove a connector with confirmation.

For more details on connector settings, click [here](https://docs.ovaledge.com/release8.2/connectors/introduction-to-connectors/setup-and-connectivity/connector-settings).

## Connectivity Troubleshooting

If incorrect parameters are entered, error messages may appear. Ensure all inputs are accurate to resolve these issues. If issues persist, contact the assigned support team.

<table><thead><tr><th width="88">S. No.</th><th width="166">Error Message</th><th>Error Description &#x26; Resolution</th></tr></thead><tbody><tr><td><strong>1</strong></td><td><strong>Connection Validation Failed</strong></td><td><p><strong>Error Description:</strong> Connection validation fails when the Tenant ID, Client ID, Client Secret, or OneLake endpoint is incorrect, the Service Principal cannot authenticate, required permissions are missing, or Microsoft Fabric workspaces cannot be accessed.</p><p><strong>Resolution:</strong></p><ul><li>Verify the Tenant ID, Client ID, Client Secret, and OneLake endpoint.</li><li>Confirm the Service Principal can access Microsoft Fabric OneLake.</li><li>Verify outbound connectivity to Microsoft Entra ID and OneLake endpoints.</li></ul></td></tr><tr><td><strong>2</strong></td><td><strong>Authentication Failed / Invalid Client Secret</strong></td><td><p><strong>Error Description:</strong> Authentication fails because the Client Secret is invalid or expired, the Client ID or Tenant ID is incorrect, or the Microsoft Entra application configuration is invalid.</p><p><strong>Resolution:</strong></p><ul><li>Verify the Client ID, Client Secret, and Tenant ID.</li><li>Regenerate the Client Secret if it has expired.</li><li>Ensure the Service Principal is active and properly configured.</li></ul></td></tr><tr><td><strong>3</strong></td><td><strong>Authorization Failure (Access Denied)</strong></td><td><p><strong>Error Description:</strong> Authentication succeeds, but the Service Principal does not have sufficient permissions to list workspaces, browse folders, or read files in Microsoft Fabric OneLake.</p><p><strong>Resolution:</strong></p><ul><li>Assign the required Azure Storage Blob Data Reader role for read operations.</li><li>Verify the Service Principal has the required Microsoft Fabric workspace access.</li><li>Confirm resource-level permissions are correctly configured.</li></ul></td></tr><tr><td><strong>4</strong></td><td><strong>Workspace or File Not Found</strong></td><td><p><strong>Error Description:</strong> The specified workspace, lakehouse, folder, or file cannot be located because the configured path is incorrect or the resource no longer exists.</p><p><strong>Resolution:</strong></p><ul><li>Verify the workspace, lakehouse, folder, and file path.</li><li>Confirm the resource exists in Microsoft Fabric.</li><li>Ensure the correct <strong>Files</strong> or <strong>Tables</strong> path is selected.</li></ul></td></tr><tr><td><strong>5</strong></td><td><strong>No Workspaces or Files Found</strong></td><td><p><strong>Error Description:</strong> No Microsoft Fabric workspaces or files are returned because the Service Principal cannot list available workspaces, the tenant contains no accessible workspaces, or the configured location is empty.</p><p><strong>Resolution:</strong></p><ul><li>Verify Microsoft Fabric workspaces exist.</li><li>Confirm the Service Principal has permission to list workspaces.</li><li>Validate the configured workspace and folder path.</li></ul></td></tr><tr><td><strong>6</strong></td><td><strong>Operation Timed Out</strong></td><td><p><strong>Error Description:</strong> File browsing, preview, or profiling exceeds the configured timeout because of large datasets, network latency, or temporary Microsoft service delays.</p><p><strong>Resolution:</strong></p><ul><li>Retry the operation after some time.</li><li>Limit operations to a smaller folder or dataset.</li><li>Verify network stability and timeout configuration.</li></ul></td></tr><tr><td><strong>7</strong></td><td><strong>File Download or Preview Failed</strong></td><td><p><strong>Error Description:</strong> File download or preview fails because the file is unavailable, access is restricted, the configured path is incorrect, or network connectivity is interrupted.</p><p><strong>Resolution:</strong></p><ul><li>Verify the file exists.</li><li>Confirm the Service Principal has read permission.</li><li>Validate the file path and retry the operation.</li></ul></td></tr><tr><td><strong>8</strong></td><td><strong>Unsupported or Invalid File Format</strong></td><td><p><strong>Error Description:</strong> File preview or profiling fails because the file format, structure, encoding, or content is unsupported or invalid.</p><p><strong>Resolution:</strong></p><ul><li>Verify the file format is supported.</li><li>Ensure CSV files contain a valid header row and supported encoding.</li><li>Open the file to confirm it is not corrupted.</li></ul></td></tr><tr><td><strong>9</strong></td><td><strong>Data Detection Failed</strong></td><td><p><strong>Error Description:</strong> Column names or data types cannot be accurately detected because of inconsistent data, mixed data types, or insufficient sample records.</p><p><strong>Resolution:</strong></p><ul><li>Ensure files contain sufficient sample data.</li><li>Maintain consistent values within each column.</li><li>Use supported data formats and encoding.</li></ul></td></tr><tr><td><strong>10</strong></td><td><strong>Network or Proxy Error</strong></td><td><p><strong>Error Description:</strong> Communication with Microsoft Entra ID or Microsoft Fabric OneLake fails because of network restrictions, proxy configuration issues, or firewall rules.</p><p><strong>Resolution:</strong></p><ul><li>Verify proxy configuration, if applicable.</li><li>Allow outbound HTTPS access to Microsoft Entra ID and OneLake endpoints.</li><li>Confirm DNS resolution and firewall settings.</li></ul></td></tr><tr><td><strong>11</strong></td><td><strong>AADSTS Authentication Error</strong></td><td><p><strong>Error Description:</strong> Microsoft Entra ID returns an AADSTS authentication error because of invalid credentials, incorrect tenant configuration, expired secrets, or application configuration issues.</p><p><strong>Resolution:</strong></p><ul><li>Verify the Tenant ID, Client ID, Client Secret, and endpoint configuration.</li><li>Confirm the Service Principal is correctly configured and has the required permissions.</li><li>Review the returned AADSTS error code to identify the specific authentication issue.</li></ul></td></tr></tbody></table>

## FAQs

<details>

<summary>Why does connection validation fail?</summary>

Connection validation fails when the Tenant ID, Client ID, Client Secret, or OneLake endpoint is incorrect, the Service Principal cannot authenticate, required permissions are missing, Microsoft Fabric workspaces are inaccessible, or the application cannot reach Microsoft Entra ID or OneLake services. Verify the authentication details, assigned permissions, and network connectivity.

</details>

<details>

<summary>Why are workspaces, folders, or files not displayed?</summary>

Workspaces, folders, or files may not appear when the Service Principal does not have permission to list Microsoft Fabric workspaces, the configured path is incorrect, the selected location is empty, or the resource is unavailable. Verify the workspace path, lakehouse location, and assigned permissions.

</details>

<details>

<summary>Which permissions are required?</summary>

Assign the **Storage Blob Data Reader** role for read operations such as browsing, previewing, downloading, and profiling files. Assign **Storage Blob Data Contributor** only when write operations are required. The Service Principal must also have an appropriate Microsoft Fabric workspace role to access workspace content.

</details>

<details>

<summary>Why are file operations slow?</summary>

File browsing, preview, download, or profiling may take longer when processing large lakehouses, numerous files, large Parquet datasets, or when network latency is high. Limiting operations to a specific folder or smaller dataset and ensuring stable network connectivity can improve performance.

</details>

<details>

<summary>Why does Service Principal authentication fail?</summary>

Service Principal authentication fails when the Tenant ID, Client ID, or Client Secret is incorrect or expired, the Microsoft Entra application is improperly configured, or the Service Principal does not have the required permissions. Verify the authentication details, regenerate the Client Secret if necessary, and ensure the Service Principal is active.

</details>

<details>

<summary>How can AADSTS authentication errors be resolved?</summary>

AADSTS errors indicate Microsoft Entra ID authentication problems such as invalid credentials, expired Client Secrets, incorrect Tenant IDs, application configuration issues, or missing permissions. Review the returned AADSTS error code, verify the Microsoft Entra application configuration, and update the connection details if required.

</details>

<details>

<summary>Why does connection validation succeed but file access fail?</summary>

Connection validation only verifies authentication and workspace accessibility. File operations require additional read permissions on Microsoft Fabric OneLake resources. Verify that the Service Principal has the required Azure Storage and Microsoft Fabric workspace permissions to access the target files.

</details>

<details>

<summary>Why does View Data work without Bridge but fail when using Bridge?</summary>

View Data operations executed through Bridge may fail when the required Bridge configuration or system properties are unavailable. Verify that the Bridge deployment is up to date, the required system properties are configured, and the Bridge can access Microsoft Fabric OneLake successfully.

</details>

***

Copyright © 2026, OvalEdge LLC, Peachtree Corners, GA, USA.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.ovaledge.com/release8.2/connectors/connector-repositories/file-connectors/microsoft-fabric-onelake.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.