Error 'Admin consent needed when creating Lakehouse' while authenticating Prepare Instance in Fabric Lakehouse¶

Symptoms¶

Error while setting up and authenticating a Prepare instance in Fabric Lakehouse. Error Message received:

Cause¶

The error occurs because Timextender triggers a request to allow their app registration to act on behalf of a non-MFA user. This is needed so that the app registration can be used to log in without interactive login prompts every time. This process is called permission delegation and gives the app registration the same permissions that the non-MFA user has within the Fabric scope. If permission delegation by user consent is not allowed within the Entra tenant or for that specific non-MFA user, admin consent is required.

https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/user-admin-consent-overview#user-consent-settings"

Resolution¶

To resolve this issue, follow these steps:

1. Ensure that permission delegation by user consent is allowed within your Entra tenant or for the specific non-MFA user.
2. If user consent is not allowed, an admin must approve that the app registration can act on behalf of the non-MFA user.

Reference Ticket¶

33292

Reference Links¶

• User and admin consent overview
• Run on-demand item job using Microsoft Entra supported identities