question

MT-3962 avatar image
0 Votes"
MT-3962 asked MT-3962 answered

Azure Data Factory cannot load from Office365

Hi,

I am getting the following error. Could you let me know how to resolve this?

ErrorCode=UserErrorOffice365SinkValidationError,'Type=Microsoft.DataTransfer.Common.Shared.HybridDeliveryException,Message=Office365 data loading job failed to validate the sink data store. Possible causes are the name of the data store or its folder path is invalid, or the provided credentials do not have enough permission to access the folder. Detailed error: Blob operation Failed. ContainerName: mailbox, path: b/.,Source=Microsoft.DataTransfer.ClientLibrary,'

Source and Sink test connectivity runs ok and there are no Pipeline Validation errors.

Thanks,
MT

azure-data-factory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MT-3962 avatar image
0 Votes"
MT-3962 answered

Great - thanks vm!

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SathyamoorthyVijayakumar-MSFT avatar image
0 Votes"
SathyamoorthyVijayakumar-MSFT answered SathyamoorthyVijayakumar-MSFT edited

Hello @MT-3962 ,
Welcome to the Microsoft Q&A platform.

I see that you are 'UserErrorOffice365SinkValidationError'. One cause could be because of the lack of Permission.

Can you please confirm whether are you making you're making use of the Service Principal ? Also, can you confirm what is the permission level you are making use of for the Identity(Service Principal/User Principal) ?

135397-image.png

For sink - the basic permission level would be Storage Blob data Contributor Role.


Access Storage Account in which Sink Blob is present --> Access Control (IAM ) ---> Search and select the principal Name --> Check whether Storage Blob Data Contributor Role is present - if not provide the role by following steps mentioned here.

135466-image.png

I understand that Source and Sink test connectivity runs ok and there are no Pipeline Validation errors - If I am not wrong, this checks out well if the identity accessing has a basic read permission.



Update :

The contributor role may not suffice in this scenario. You would still need Storage Blob Data Contributor as mentioned in the article here.

135577-image.png

Please let us know if you have any queries.

Hope this will help. Please let us know if any further queries.



  • Please don't forget to click on 130616-image.png or upvote 130671-image.png button whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how

  • Want a reminder to come back and check responses? Here is how to subscribe to a notification

  • If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators



image.png (46.0 KiB)
image.png (14.1 KiB)
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @SathyamoorthyVijayakumar-MSFT

Thank you for your response. Principal d7947a86-2ecf-4b8d-820f-8391cf75c25a has Contributor access to the relevant storage account

Best Regards,
Marcin

135557-image.png
135527-image.png


0 Votes 0 ·
image.png (48.3 KiB)
image.png (68.0 KiB)

@MT-3962,

Thanks for getting back.

Like mentioned in this article :

135567-image.png

You have the ARM Contributor role - This lets you to list keys & manage at portal level. However, you would still need Storage Blob Contributor Role. There is a detailed discussion in this thread.

135576-image.png


0 Votes 0 ·
image.png (14.1 KiB)
image.png (43.7 KiB)