Question
You have a Fabric workspace named Workspace1.
You plan to integrate Workspace1 with Azure DevOps.
You will use a Fabric deployment pipeline named deployPipeline1 to deploy items from Workspace1 to higher environment workspaces as part of a medallion architecture. You will run deployPipeline1 by using an API call from an Azure DevOps pipeline.
You need to configure API authentication between Azure DevOps and Fabric.
Which type of authentication should you use?
- A. service principal Correct
- B. Microsoft Entra username and password
- C. managed private endpoint
- D. workspace identity
Explanation
An unattended Azure DevOps pipeline that calls the deployment pipelines REST API should authenticate as a Microsoft Entra service principal, which the deployment pipelines APIs support for automation. A username and password ties the pipeline to a person's account and breaks when MFA or conditional access applies. A managed private endpoint is a network feature, not an authentication method. A workspace identity is used by Fabric items to reach other resources, so an external caller such as Azure DevOps cannot use it.
