Skip to content

Commit de4e1ea

Browse files
Merge pull request #35795 from WilliamDAssafMSFT/20251110-copy-into
20251110 COPY INTO authentication for Fabric DW
2 parents df4580e + d3c2395 commit de4e1ea

File tree

1 file changed

+8
-10
lines changed

1 file changed

+8
-10
lines changed

docs/t-sql/statements/copy-into-transact-sql.md

Lines changed: 8 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ description: Use the COPY statement in Azure Synapse Analytics and Warehouse in
55
author: WilliamDAssafMSFT
66
ms.author: wiassaf
77
ms.reviewer: procha, mikeray, fresantos
8-
ms.date: 10/15/2025
8+
ms.date: 11/10/2025
99
ms.service: sql
1010
ms.subservice: t-sql
1111
ms.topic: reference
@@ -680,23 +680,21 @@ To access files on Azure Data Lake Storage (ADLS) Gen2 and Azure Blob Storage lo
680680

681681
#### *CREDENTIAL (IDENTITY = '', SECRET = '')*
682682

683-
*CREDENTIAL* specifies the authentication mechanism to access the external storage account. On [!INCLUDE [fabric-dw](../../includes/fabric-dw.md)] in [!INCLUDE [fabric](../../includes/fabric.md)], the only supported authentication mechanisms are Shared Access Signature (SAS) and Storage Account Key (SAK).
683+
*CREDENTIAL* specifies the authentication mechanism to access the external storage account.
684684

685-
The user's EntraID authentication is default. No credential needs to be specified. COPY INTO using OneLake as source only supports EntraID authentication.
685+
In Fabric Data Warehouse:
686+
- For private storage accounts, the only supported authentication mechanisms are Shared Access Signature (SAS) and Storage Account Key (SAK).
687+
- For public storage accounts, Microsoft Entra ID authentication is the only supported authentication method. When using a public storage account, CREDENTIAL does not need to be specified. By default the executing user's Entra ID is used.
686688

687-
> [!NOTE]
688-
> When using a public storage account, CREDENTIAL does not need to be specified. By default the executing user's Entra ID is used.
689+
The user's EntraID authentication is default. No credential needs to be specified. COPY INTO using OneLake as source only supports EntraID authentication.
689690

690691
- Authenticating with Shared Access Signature (SAS)
691-
692692
- *IDENTITY: A constant with a value of 'Shared Access Signature'*
693693
- *SECRET: The* [*shared access signature*](/azure/storage/common/storage-sas-overview) *provides delegated access to resources in your storage account.*
694-
- Minimum permissions required: READ and LIST
695-
694+
- Minimum permissions required: READ and LIST
696695
- Authenticating with Storage Account Key
697-
698696
- *IDENTITY: A constant with a value of 'Storage Account Key'*
699-
- *SECRET: Storage account key*
697+
- *SECRET: Storage account key*
700698

701699
#### *ERRORFILE = Directory Location*
702700

0 commit comments

Comments
 (0)