Configure administrator settings to enable ArcGIS Maps for Microsoft Fabric

A Microsoft Fabric tenant administrator must configure several settings and permissions to enable the ArcGIS Maps for Microsoft Fabric workload.

Microsoft Fabric tenant settings

To start using this workload, a tenant administrator may need to enable ArcGIS Maps for Fabric at the tenant level from the Admin portal. You can access the Admin portal from the Settings pane in Microsoft Fabric. Enable ArcGIS Maps for Microsoft Fabric workload by clicking the toggle switch under Tenant settings. Additionally, your workspace capacity must be sufficient to save items from the workload.

Microsoft Fabric permissions

You need the following API permissions to enable the workload:

Azure storage

• user_impersonation

Microsoft Graph

• offline_access

• openid

• profile

Power BI Service

• Fabric.Extend

• Fabric.Extend.IframeSandbox

• Item.ReadWrite.All

• Workspace.Read.All

Microsoft Entra single sign-on authentication

To use the ArcGIS Maps for Fabric workload, you must have Microsoft Entra single sign-on authentication enabled. Learn more about how to configure Fabric for single sign-on with Microsoft Entra ID.

ArcGIS authentication methods

Note:

You must be an organization administrator to configure ArcGIS authentication.

ArcGIS Maps for Microsoft Fabric supports the following authentication protocols for connecting to ArcGIS Online:

• Built-in accounts—Users provide their ArcGIS Online credentials. This results in the use of token-based authentication using OAuth 2.0.

• OpenID Connect—ArcGIS administrators can configure the ArcGIS Online sign-in page to show the OpenID Connect 2.0 login. For more information, see Set up OpenID Connect logins in the ArcGIS Online help.

• SAML—Administrators can also configure the ArcGIS Online sign-in page to show the Security Assertion Markup Language (SAML) 2.0 login. Learn how to set up SAML logins in ArcGIS Online.

Note:

You can access and contribute to detailed third-party IdP configuration documentation in the ArcGIS/idp GitHub repository.

An organization administrator can tie ArcGIS Online authentication to your Microsoft Entra ID so that users don't need to sign in to ArcGIS Maps for Fabric when they've already signed in to Microsoft Fabric. Both the SAML and OpenID protocols can be used to set up Microsoft Entra Single sign-on. Learn more about how to configure ArcGIS Online for Single sign-on with Microsoft Entra ID.