Dataflows Storage can't connect to ADLS Gen2

[PavelR]

Hi,

I am struggling with connecting my PBI Tenant to my Dataflow storage. I have set up everything based on MS doc, so it means:

• I am using ADLS Gen2 with the correct region, Hot performance/access tier, Hierarchical namespaces
• Created a BLOB container with "powerbi" name
• Added access rights directly in MS Azure Storage Explorer to - Power BI Service, Premium and Power Query Online plus to Other added Execution rights
• In Azure Portal on storage in Access Control (IAM) I am the owner of the resource (not inherited from subscription) and I have added Power BI Service as a Reader and data access role

Then when I try to connect it in PBI Service in Admin portal and put there correct connection details I receive:

A few months ago I already set up storage with PBI, but then I wanted to change it. So I disconnected the previous storage and wanted to add a new one. Even though I followed all the videos, blogs, and docs I can't make it work. I would be pleased with any kind of help.

Thanks.

Pavel

[bh56]

Did you ever find out what your issue was?  I'm having the same issue.

Can't connect to storage account

We couldn't connect to the storage account because you don't have the required role-based-access-control (RBAC) permissions. Make sure you're assigned the "Reader and Data Access Role" for this storage account, and try again.

[PavelR · Accepted solution]

@bh56 you have a little bit different issue. You have to set correct access roles in IAM (access control) in Azure Portal. You have to be the owner of the resource (not inherited one).

My problem was solved via MS Support - the only thing was that I had to delete a container (named powerbi) that I had in my ADLS Gen2. The mechanism behind creates this container automatically. Now everything works for me.

Let me know whether you need some additional assistance.

[vijaykj09]

Hi Pavel,

 

I’m facing the same problem. I have followed all the steps given in https://docs.microsoft.com/en-us/power-bi/transform-model/service-dataflows-connect-azure-data-lake-... and read your post.

However, when I try connect my storage account to dataflow, I‘m just getting a below error message. Error message is not pointing to any particular error.

Error Details

Access denied: Please try again later or contact support. If you contact support, please provide these details.

Not sure what's the exact issue to debug. Did you face this issue? 

[bh56]

@PaveIR Thanks for getting back to me.  I did add the roles under IAM.

Do you have your storage defined as "hierarchical namespace enabled".  I do, wondering if that is my issue.

It's unclear to me at this point if this is needed to leverage ADLS Gen2 storage or not.

https://docs.microsoft.com/en-us/azure/storage/common/storage-auth-aad-rbac-portal#assign-a-built-in...

As an owner of your Azure Storage account, you are not automatically assigned permissions to access data. You must explicitly assign yourself an RBAC role for Azure Storage. You can assign it at the level of your subscription, resource group, storage account, or a container or queue.

You cannot assign a role scoped to a container or queue if your storage account has a hierarchical namespace enabled.

[PavelR]

HI @bh56 ,

yes it has to be hierarchical namespace enabled ADLS Gen 2, otherwise, it won't work.

Pavel

[michaelm91]

Based on the documentation limits of the integration of ADLS and PBI, you are only able to integrate once at least as implemented within the preview. This is probably why you are having the issue even though you were able to unlink it. I suggest opening up a ticket and see if they can clear anything in the backend that is probably preventing it from integrating.

https://docs.microsoft.com/en-us/power-bi/transform-model/service-dataflows-connect-azure-data-lake-...

There is an upcoming feature that is integrate an ADLS at the workspace level slated for preview in July 2020. Maybe by then either the limiation from above can be cleared out or the integration at the workspace level will help resolve your issue. 

https://docs.microsoft.com/en-us/power-platform-release-plan/2020wave1/business-intelligence/power-b...

[PavelR]

Thanks for your response @michaelm91 Yeah, I am about to open a support ticket.

[v-yingjl]

Hi @PavelR ,

Here is someone who had the same problem with you and has solved it. Please refer to Unable to connect to Azure Data lake Gen2 storage on Power BI to use DataFlow.

Before you can configure Power BI with an Azure Data Lake Storage Gen2 account, you must create and configure a storage account.

Best Regards,
Yingjie Li

If this post helps then please consider Accept it as the solution to help the other members find it more quickly.

[PavelR]

Hi @v-yingjl you are referring to the different issues than I am struggling with. It does not help me at all.

As I have already mentioned I have created and configured a storage account.

[PavelR]

When I remove Power BI Service in the role of a Reader from Access Control (IAM) in my storage account, then I get the "Can't connect to storage account"

When I add it back, then I am again stuck with the error message that I have shown in the first post.

Does anybody know how to overcome those issues?

[Anonymous]

This error is extremely misleading. See below response, based on MS documentation. It has solved the issue for me.

Grant permissions to Power BI services

You need to grant the Power BI service reader and data access roles in your created storage account. They are both built-in roles, so the steps are straightforward. Follow the steps in Assign a built-in RBAC role.

Go to your resource -> IAM -> in the Add role assignment window, select the Reader and Data Access role. Then use search to locate the Power BI Service application. Repeat the same steps for the Storage Blob Data Owner role, and assign the role to both the Power BI Service and Power BI Premium applications.

https://docs.microsoft.com/en-us/power-bi/transform-model/service-dataflows-connect-azure-data-lake-...