Veezoo

Connecting to Microsoft Fabric

Connect a Fabric Warehouse or Lakehouse SQL analytics endpoint to Veezoo using a Microsoft Entra service principal.

Use the Microsoft Fabric connector in Veezoo Studio to query a Fabric Warehouse or Lakehouse through its SQL analytics endpoint. The connector uses a Microsoft Entra service principal with an application (client) ID and client secret.

Create the application credentials

Ask your Microsoft Entra administrator to create an application for Veezoo, or use an existing service principal approved for accessing your Fabric data.

  1. In the Microsoft Entra admin center, open App registrations and select the application.
  2. Copy the Application (client) ID from its overview page.
  3. Under Certificates & secrets, select Client secrets, then New client secret.
  4. Copy the secret's Value when it is displayed, and record its expiry date. The value is only shown when the secret is created; the Secret ID is not a valid credential.

See Microsoft's application and service principal guide for the registration steps.

Grant access in Fabric

Have your Fabric administrator enable Service principals can use Fabric APIs for the service principal, or for a security group that contains it. A workspace administrator must also grant the service principal access to the target data. See Microsoft's Fabric service principal prerequisites.

The service principal needs permission to connect and read the tables or views you want to expose in Veezoo. A workspace Viewer role is one option when read access to the whole workspace is appropriate. For narrower access, have your administrator configure permissions for the intended items and SQL objects. See Microsoft's workspace roles and service principal data permissions.

Find the SQL endpoint and database name

Open your Warehouse or Lakehouse SQL analytics endpoint in Fabric. In Settings, open SQL connection string and copy the server address, for example your-endpoint.datawarehouse.fabric.microsoft.com.

Also note the database name for the Warehouse or Lakehouse SQL analytics endpoint. If you have a full connection string, use its Database or Initial Catalog value. See Microsoft's connection details guide.

Configure Veezoo Studio

  1. Create a new dataset in Studio and select the Microsoft Fabric tile.
  2. Enter the connection details:
FieldValue
SQL endpointThe server address copied from Fabric. Enter the hostname only, without https://, a port, or other connection-string properties.
Warehouse or LakehouseThe database name of the Warehouse or Lakehouse SQL analytics endpoint.
Application (client) IDThe application ID from Microsoft Entra, for example 11111111-2222-3333-4444-555555555555.
Client secretThe secret value belonging to that application.
  1. Click Test Connection.
  2. Click Next, then select the schemas, tables, and columns to import.

Your network configuration must allow Veezoo to reach the SQL endpoint over TCP port 1433 and Microsoft Entra over HTTPS, which the service-principal sign-in requires. If access is restricted by source IP, use the Veezoo IP displayed in Studio. See Microsoft's Fabric connectivity guidance.

Existing connections and secret rotation

Existing Fabric connections configured through Microsoft SQL Server continue to work. To use the dedicated form, open the Knowledge Graph's Database Connection page, select Microsoft Fabric, and re-enter the endpoint, database name, application ID, and client secret. Click Test Connection, then submit the form to save the connection.

When editing a saved Fabric connection, leave Client secret empty to keep its stored value. Before the secret expires, create a replacement in Microsoft Entra, enter its value in Studio, test the connection, and save it.

Troubleshooting

  • Authentication fails: check the application ID, the secret's value and expiry, the Fabric tenant setting, and the service principal's access to the target data.
  • The connection succeeds but tables are missing: check the selected database and SQL permissions. For a Lakehouse, the tables must be available through its SQL analytics endpoint.
  • The connection times out: check that the endpoint is reachable from your Veezoo deployment over TCP port 1433.