Azure Data Factory
An Azure service for ingesting, preparing, and transforming data at scale.
11,107 questions
How to troubleshoot creating service principal?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 36%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERT%3C/text%3E%3C/svg%3E)
Ryan Tay
5
Reputation points
I'm trying to use the Ingest feature in Data Factory and I'm on the "Source data store" step so I'm trying to establish the connection with the DB. The first code block is the error details after testing the connection for the error code: SqlFailedToConnect.
https://youtu.be/sge9qTf8GdY?si=QOFiYiCVDBY9JudO&t=225
I was following the above tutorial (timestamp included) and he says to create the service principal for the application which I tried in Data Studios. The second code block is the error I get after running the SQL code he showed. This is the issue I'm having and I'm assuming that it's something to do with permissions but I already have "Azure Active Directory (Azure AD) is now Microsoft Entra ID." on my server. Do I have to play with the SQL Server's IAM for the Service Principal or the ADF? I'm not sure.
Cannot connect to SQL Database. Please contact SQL server team for further support. Server: '____server.database.windows.net', Database: '____db', User: ''. Check the linked service configuration is correct, and make sure the SQL Database firewall allows the integration runtime to access. Login failed for user '<token-identified principal>'. The server is not currently configured to accept this token.
Msg 33159, Level 16, State 1, Line 1 Principal '___-adf' could not be created. Only connections established with Active Directory accounts can create other Active Directory users. Msg 15151, Level 16, State 1, Line 2 Cannot add the principal '____-adf', because it does not exist or you do not have permission.
{count} votes
-
Vinodh247 27,016 Reputation points MVP2025-01-14T06:45:13.4833333+00:00 - Use an account with AAD Admin privileges in SQL Server.
- Re-run the script to create the principal for ADF's MI (CREATE USER [<managed-identity-name>] FROM EXTERNAL PROVIDER). If you're using Azure SQL Database, ensure the admin account is an AAD account and not a SQL auth account.
-
Ryan Tay 5 Reputation points
2025-01-14T06:54:08.22+00:00 Does this not mean I have AAD Admin privileges?
-
Vinodh247 27,016 Reputation points MVP
2025-01-14T07:02:05.4466667+00:00 - Navigate to your SQL Server instance (not the database).
- Under Settings, click on Azure Active Directory.
- Check if your account is listed as the Active Directory Admin for the SQL Server.
If your account is not listed, you need to:
- Add your account as the Azure AD Admin, or
- Use an account that is already assigned as the Azure AD Admin.
If you do not have access to configure Azure AD Admin, you may need to contact your organization’s administrator.
-
Ryan Tay 5 Reputation points
2025-01-14T07:18:21.64+00:00 @Vinodh247 Yes the picture I showed was in my SQL Server instance, also the AAD has been renamed to 'Microsoft Entra ID'. The account is already listed as "Microsoft Entra Admin" in the SQL Server. Does the database status being "Paused" have anything to do with it?
Sign in to comment
Sign in to answer