John Liu Blog

Every drop counts

Fabric Capacity

When we use paid Fabric Capacity, we might need to auto pause and resume the capacity for cost saving. We can use Azure Automation Runbook to achieve this. We setp an Automation Account with a Managed Idenity. Step 1: Set Up Permissions Go to your Azure Automation Account. Under Account Settings, click Identity and ensure the “System assigned” toggle is On. Go to your Fabric Capacity resource in the Azure Portal.

Posted by John Liu Friday, January 23, 2026

Grant user access to Azure MSDN subscription

For old MSA-originated MSDN / Visual Studio subscriptions, we might not be able to grant user access to the subscription. The subscription is linked to your personal account, and there is a portal-side RBAC picker defect caused this issue. To grant access to the subscription to other users created in your directory, using following Azure CLI (Cloud Shell) and grant the user contributor role. az role assignment create \ --assignee-object-id <USER_OBJECT_ID> \ --assignee-principal-type User \ --role Contributor \ --scope /subscriptions/<SUBSCRIPTION_ID> Subsitute <USER_OBJECT_ID> with the Object ID for the user in Microsoft Entra ID, and <SUBSCRIPTION_ID> for the subscription in question.

Posted by John Liu Friday, January 23, 2026

Fabric Mirrored SQL Server Data Gateway Issue

When create mirrored SQL server in Fabric to on-premises SQL database, we will need to use On-Premises Data Gateway. We might encounter issue with Use Encrypted Connection option with self-signed certificate. To resolve issue with Use Encrypted Connection, try following solutions: Solution 1: Add your SQL Server to the “Trusted Servers” List: There is a “hidden” configuration in the On-premises Data Gateway that allows you to bypass certificate validation for specific servers.

Posted by John Liu Friday, January 9, 2026

Generate Self-signed Certificate

There are time we might need a certificate, for example, to set up Azure Service Principle without using secret. We can use PowerShell or OpenSSL to generate self-signed certificate. # 1. Config $certname = "SQLDataExportCert" # password for secure the private key file # use single quote to quote the string, to handle special character like $ $pwdstring = 'YourSecurePassword' # Define the expiration date (e.g., 5 years from today) $expiryDate = (Get-Date).

Posted by John Liu Tuesday, December 30, 2025

Fabric KQL Database

In Fabric KQL database, we can copy the Query URI link and using it (without the https://) as the Server Name in SSMS and use Microsoft Entra MFA authentication to connect to the KQL database and query the data using T-SQL syntax. Alternative, we can using the T-SQL syntax in the Fabric UI query tab but add the T-SQL comment line “–” as the first line of the query. That will indicate to the engine that the query syntax is T-SQL instead of KQL.

Posted by John Liu Saturday, December 27, 2025