Connecting to Microsoft Fabric
This feature is currently available as a Private Preview only
During a Private Preview, only customers who have agreed to our Private Preview usage agreements can access this feature. Additionally, the features documented here are subject to change and / or cancellation, so they may not be available to all users in future.
For more information about our Private Preview releases, including the level of Support offered with them, see: Feature release types.
Important
Any references to third-party products or services do not constitute Celonis Product Documentation nor do they create any contractual obligations. This material is for informational purposes only and is subject to change without notice.
Celonis does not warrant the availability, accuracy, reliability, completeness, or usefulness of any information regarding the subject of third-party services or systems.
You can establish zero-copy connectivity between your Microsoft Fabric enterprise data lake and the Celonis Platform, allowing you to share data between the platforms with zero latency. This means that any updates in your data lake are automatically fed to your Celonis data pool.
The benefits of this connection include:
Enables you to mirror your Microsoft Fabric data to Celonis via a zero-copy integration.
Embeds Celonis as a native workload within your Microsoft Fabric environment.
Secures your data as it remains in its original location, preserving your data governance.
There are two methods for connecting your Microsoft Fabric to the Celonis Platform:
Important
The Microsoft Fabric zero-copy connection is only available in data pools running on the ETL engine. For more information, see ETL Engine.
Once the connection between the systems is established, you can also embed your Studio Views into Microsoft Fabric:
Zero-copy connectivity video demo
Watch our video demo showing you how to connect your Microsoft Fabric account to the Celonis Platform and then embed your Studio views in Microsoft Fabric:
Overview of connection and data access
The following sections provide an overview of how Celonis Platform connects to Microsoft Fabric and how your data is accessed.
To connect to Microsoft Fabric from the Celonis Platform (as described in Configuring the Microsoft Fabric connection in Celonis Platform), a user with necessary permissions for Microsoft directory must register it in the directory.
Once it's registered, the Celonis Platform requests a delegated access to Microsoft Fabric using the OAuth 2.0 authorization code flow. This allows the Celonis Platform to act on behalf of the user to list lakehouses and configure workspace contributor access. The contributor role grants the Celonis Platform full read access to data using OneLake APIs.
After the access is established, user-based credentials are discarded, and the Celonis Platform fetches all table metadata and registers it in Celonis Data Core (Celocore). This integration allows creating a read-only data connection to schemaless Delta format lakehouses.
Note
Connection to lakehouses with schemas is not supported.
For the list of all permissions required for this process, see Prerequisites.
After establishing the connection, Microsoft Fabric tables can be used in Celocore data pools as read-only tables. This is done using a OneLake shared access signature (SAS) which separates Microsoft Entra access from the query engine. Communication between the query engine, data catalog, and data access service is secured through encrypted and authenticated channels, ensuring data confidentiality and strong tenant isolation.
The query engine can only access tables and credentials scoped to the tenant and data pool of the current execution. The engine uses these credentials to request data from the data access service. This service, in turn, generates short-lived user delegation keys and pre-signed links for OneLake objects, enabling the query engine to securely retrieve the necessary data.
For the list of all permissions required to be enabled for the Celonis Platform to fetch data from Microsoft Fabric, see Prerequisites.
Prerequisites
This section details important prerequisites or prerequisite knowledge for using this connection.
Note
The following prerequisites are required when connecting from the Celonis Platform to Microsoft Fabric (as described in Configuring the Microsoft Fabric connection in Celonis Platform).
If you are connecting from Microsoft Fabric to the Celonis Platform (as described in Creating a new item in Microsoft Fabric), you must only perform Microsoft Fabric required tenant permissions.
Note
The Microsoft Fabric required Celonis Platform permissions apply only when configuring the connection from within the Celonis Platform (as described in Configuring the Microsoft Fabric connection in Celonis Platform).
When creating the integration directly in Microsoft Fabric (as described in Creating a new item in Microsoft Fabric), these permissions are automatically handled during the authentication flow.
To set up the data connection from the Celonis Platform, before doing so, you must have access to a Microsoft Fabric user account and access to your workspaces. This user account can then be used to authenticate the connection between the two platforms, by providing the following fields in the connection configuration:
Azure tenant ID
Lakehouse URL
Workspace and related Lakehouses
For more information, see: Microsoft Entra - Overview of user and admin consent.
Note
The Microsoft Fabric required Celonis Platform permissions apply only when configuring the connection from within the Celonis Platform (as described in Configuring the Microsoft Fabric connection in Celonis Platform).
When creating the integration directly in Microsoft Fabric (as described in Creating a new item in Microsoft Fabric), these permissions are automatically handled during the authentication flow.
In Microsoft Fabric, grant the following permissions to the Celonis Platform:
Lakehouse.Read.All- read lakehouse metadata like contained tables,OneLake.Read.All- read OneLake metadata of lakehouse items like Azure Data Lake Storage URL,Workspace.ReadWrite.All- read workspaces and add the Celonis app as a contributor to your selected workspace.
Note
The Microsoft Graph required Celonis Platform permissions apply only when configuring the connection from within the Celonis Platform (as described in Configuring the Microsoft Fabric connection in Celonis Platform).
When creating the integration directly in Microsoft Fabric (as described in Creating a new item in Microsoft Fabric), these permissions are automatically handled during the authentication flow.
In Microsoft Graph, grant the following permissions to the Celonis Platform:
offline_access- gives access to Microsoft Fabric and Microsoft Graph resources in a single consent flow,User.Read- reads user profile.
Note
These tenant-level settings must be enabled in the Microsoft Fabric Admin Portal for either connection scenario—whether the connection is created from within the Celonis Platform or directly in Microsoft Fabric. They apply globally to all workspaces and integrations in the tenant.
In Microsoft Fabric, give the following tenant permissions to the Celonis Platform. See link for Microsoft Fabric documentation for detailed information on each setting:
Service principals can call Fabric public APIs - gives the Celonis Platform access to Microsoft Fabric API without user context for persistent data access.
Users can access data stored in OneLake with apps external to Fabric - gives Celonis Platform permission to access OneLake using the Azure Data Lake Storage API.
Use short-lived user-delegated SAS tokens (preview) - a prerequisite for SAS tokens, enables generation of user delegation keys on the tenant.
Authenticate with OneLake user-delegated SAS tokens (preview) - enables SAS token access on all workspaces. Can also be activated per workspace.
Configuring Microsoft Fabric zero-copy connections
There are two methods for connecting your Microsoft Fabric to the Celonis Platform:
Tip
After configuring the connection, you can also embed Celonis Studio Views in Microsoft Fabric by following the instructions in Embedding Studio Views into Microsoft Fabric.
Important
The Microsoft Fabric zero-copy connection is only available in data pools running on the ETL engine. For more information, see ETL Engine.
With access to your Microsoft Fabric user account, you can create a data connection between Microsoft Fabric and the Celonis Platform:
From your data pool overview screen, select Data Connections.
Select Add Data Connection and select Connect to Data Source.
Select Microsoft Fabric.
Select Authenticate, and select your Microsoft Fabric account.
The authentication is successful and you're redirected to the Celonis Platform. The following data connections fields are then populated:
Azure tenant ID
Workspaces and related Lakehouses
Note
If the data connection is set up by a Microsoft Entra user without sufficient permissions to grant consent for the Celonis Platform, the following message is displayed:
In this situation, a Microsoft Entra admin must review the admin consent request in the Microsoft Entra admin center. Once approved, the user without sufficient permissions can return to the authenticate stage and continue the configuration. For more information, see the Microsoft documentation:
Select the workspace and related lakehouse to use for the connection, populating the Lakehouse URL field.
Select Test Connection and correct any issues highlighted.
Select Save.
The connection between your Microsoft Fabric account and the Celonis Platform is established.
You can also connect your Microsoft Fabric account to the Celonis Platform through the Fabric interface.
This method requires you to have your Celonis team and cluster that you're connecting to, available from the Celonis URL:
https://[TEAM].[CLUSTER].celonis.cloud/
You also need access to a data pool on the Celonis Platform (see: Creating and managing data pools)
With this information, you can create a new item in Microsoft Fabric by following these steps:
Select Workspaces, and select the workspace you want to connect to.
Select + New Item, and search for the 'Zero-copy integration':
Add an item name, an optional description, and then select Create.
The integration screen loads.
Select Start setup, enter the Celonis team and cluster you're connecting to, and then select Authenticate.
Review and accept the authentication request with the Celonis Platform.
The page refreshes and returns you to Microsoft Fabric.
Select the Lakehouse that you want to share and then select Connect.
Select the Celonis Platform data pool and Select.
The connection between your Microsoft Fabric account and the Celonis Platform is established.
Celonis Studio Views can be embedded in Microsoft Fabric, giving your users a way to consume and analyze the data that's being shared between the platforms.
This method requires you to have your Celonis team and cluster that you're connecting to, available from the Celonis URL:
https://[TEAM].[CLUSTER].celonis.cloud/
You also need access to a Studio space and related View that you want to embed.
To embed a Studio View into Microsoft Fabric:
Select Workspaces and select the workspace you want to embed your View into.
Select + New Item and search for the 'Process Analysis':
Add an item name, an optional description, and then select Create.
The integration screen loads.
Select Start setup, enter the Celonis team and cluster you're connecting to, and then select Authenticate.
Review and accept the authentication request with the Celonis Platform.
The page refreshes and returns you to Microsoft Fabric.
Select the Studio space and related View to display.
The Studio View is now embedded into Microsoft Fabric, allowing end-users to interact with it.
For more information creating and using Studio Views and Apps, see: Views.