C1 provides identity governance for Microsoft Fabric. Integrate your Fabric tenant with C1 for unified visibility and governance over workspace access.
C1 provides identity governance for Microsoft Fabric. Integrate your Fabric
tenant with C1 for unified visibility and governance over who has access to each
workspace.
This connector is read-only: it syncs workspaces, the fixed workspace roles
(Admin, Member, Contributor, Viewer) as entitlements, and the user and service
principal role assignments through the Fabric Core REST API v1. It does not
provision changes back to Fabric.
You need a Microsoft Entra (Azure AD) administrator to register an application
and a Fabric administrator to allow service principals to use the Fabric APIs.
1
In the Azure portal, open Microsoft Entra ID > App registrations and
register a new application (single tenant is sufficient). Note the
Directory (tenant) ID and the Application (client) ID from the app’s
Overview page.
2
Under the app’s Certificates & secrets, create a new client secret
and copy its value. It is shown only once.
3
In the Fabric admin portal > Tenant settings, enable Service
principals can use Fabric APIs and add the application (or a security group
that contains it) to the allowed list. Grant the service principal at least
Viewer access on the workspaces you want C1 to see.
Follow these instructions to use a built-in, no-code connector hosted by C1.
1
In C1, navigate to Integrations > Connectors and click Add connector.
2
Search for Microsoft Fabric and click Add.
3
Choose how to set up the new Microsoft Fabric connector.
4
Set the owner for this connector.
5
Click Next.
6
Find the Settings area of the page and click Edit.
7
Enter the Microsoft Fabric credentials:
Tenant ID: the Entra directory (tenant) ID.
Client ID: the Entra application (client) ID.
Client secret: the client secret created for the application.
Entra login authority: https://login.microsoftonline.com for the
global Azure cloud, or your national-cloud authority host.
8
Click Save.
9
The connector’s label changes to Syncing, followed by Connected. You can view the logs to ensure that information is syncing.
Done. Your Microsoft Fabric connector is now pulling access data into C1.
Follow these instructions to run the Microsoft Fabric connector in your own
environment.
1
Create a secret for the Entra application client secret.
2
Configure the connector with the tenant ID, client ID, client secret,
and the Entra login authority (https://login.microsoftonline.com for
the global cloud).
3
Deploy the connector using your standard self-hosted connector process.
Done. Your Microsoft Fabric connector is now pulling access data into C1.
