📋 Prerequisites Guide¶

🏠 Home > 📚 Docs > 📋 Prerequisites

Last Updated: 2025-01-21 | Version: 1.0.0

📑 Table of Contents¶

• ☁️ Azure Requirements
• 💻 Local Development Environment
• 🔑 Microsoft Entra ID Configuration
• 🌐 Network Requirements
• ✅ Pre-Deployment Checklist
• 📝 Environment Variables Reference
• 🧪 Validation Script
• 🔧 Troubleshooting
• 📚 Next Steps

🔀 Deployment Path Selection¶

Before starting, decide which deployment path suits your needs:

Recommendation: Start with Path B to learn the medallion architecture quickly. Upgrade to Path A when you're ready for governance, security, and monitoring tutorials. The upgrade is non-destructive — deploy Bicep, move data, swap notebook source paths.

☁️ Azure Requirements¶

Subscription Access¶

📋 Prerequisites: Owner role is recommended for initial setup to configure RBAC and resource providers. If you only have Contributor access, coordinate with your subscription owner for role assignments.

Resource Provider Registration¶

Register these providers before deployment:

# Register required providers
az provider register --namespace Microsoft.Fabric
az provider register --namespace Microsoft.Purview
az provider register --namespace Microsoft.Storage
az provider register --namespace Microsoft.KeyVault
az provider register --namespace Microsoft.Network
az provider register --namespace Microsoft.OperationalInsights
az provider register --namespace Microsoft.ManagedIdentity

# Verify registration (should show "Registered")
az provider list --query "[?namespace=='Microsoft.Fabric'].registrationState" -o tsv

Required Resource Providers¶

Microsoft Fabric Requirements¶

Enable Fabric in Tenant¶

1. Go to Azure Portal > Microsoft Fabric
2. Or Fabric Admin Portal
3. Ensure Fabric is enabled for your organization

Source: Microsoft Fabric Admin Center

⚠️ Warning: Enabling Fabric requires Microsoft Entra ID Global Administrator or Fabric Administrator permissions. Contact your tenant admin if you don't have these roles.

Quota Verification¶

# Check current quota for Fabric capacities
az quota show \
  --scope "/subscriptions/{subscription-id}/providers/Microsoft.Fabric/locations/eastus2" \
  --resource-name "F64"

You can also view capacity settings in the Azure portal:

Source: Capacity Settings in Microsoft Fabric

💻 Local Development Environment¶

Required Tools¶

Installation Commands¶

Windows (using winget)¶

# Install all required tools
winget install -e --id Microsoft.AzureCLI
winget install -e --id Git.Git
winget install -e --id Microsoft.PowerShell
winget install -e --id Python.Python.3.11
winget install -e --id Microsoft.VisualStudioCode

# Install Bicep via Azure CLI
az bicep install
az bicep upgrade

macOS (using Homebrew)¶

# Install all required tools
brew install azure-cli
brew install git
brew install powershell/tap/powershell
brew install python@3.11

# Install Bicep
az bicep install
az bicep upgrade

# Install recommended extensions
code --install-extension ms-azuretools.vscode-bicep
code --install-extension ms-vscode.azure-account
code --install-extension ms-python.python
code --install-extension ms-toolsai.jupyter
code --install-extension GitHub.copilot
code --install-extension ms-vscode-remote.remote-containers
code --install-extension ms-azuretools.vscode-docker

Dev Container Setup (Alternative to Local Installation)¶

If you prefer using Dev Containers, you only need:

1. Docker Desktop (with WSL 2 backend on Windows)
2. VS Code with Dev Containers extension
3. Git (to clone the repository)

All other tools (Python, Azure CLI, Bicep, etc.) are pre-installed in the container.

# Quick start with Dev Container
git clone https://github.com/fgarofalo56/Suppercharge_Microsoft_Fabric.git
code Suppercharge_Microsoft_Fabric
# Then click "Reopen in Container" when prompted

GitHub Codespaces Alternative: No local installation required. Click "Code" > "Codespaces" > "Create codespace" on the GitHub repository.

Python Environment Setup¶

# Create virtual environment
python -m venv .venv

# Activate (Windows PowerShell)
.\.venv\Scripts\Activate.ps1

# Activate (Windows CMD)
.\.venv\Scripts\activate.bat

# Activate (Linux/Mac)
source .venv/bin/activate

# Install dependencies
pip install -r requirements.txt

Verify Installation¶

# Verify all tools
echo "Azure CLI: $(az --version | head -1)"
echo "Bicep: $(az bicep version)"
echo "Git: $(git --version)"
echo "PowerShell: $(pwsh --version)"
echo "Python: $(python --version)"

Expected Output:

Azure CLI: azure-cli 2.55.0
Bicep: Bicep CLI version 0.24.24
Git: git version 2.43.0
PowerShell: PowerShell 7.4.1
Python: Python 3.11.7

🔑 Microsoft Entra ID Configuration¶

Required Permissions¶

Service Principal Setup (for CI/CD)¶

📋 Prerequisites: You'll need this service principal for GitHub Actions automation. Skip this step if you're only doing manual deployments.

# Create service principal
az ad sp create-for-rbac \
  --name "sp-fabric-poc-deploy" \
  --role "Contributor" \
  --scopes "/subscriptions/{subscription-id}" \
  --sdk-auth

# Save output for GitHub secrets

⚠️ Warning: Store the service principal credentials securely. Never commit them to source control. Use a password manager or Azure Key Vault.

Configure OIDC for GitHub Actions¶

# Get app registration object ID
APP_ID=$(az ad app list --display-name "sp-fabric-poc-deploy" --query "[0].appId" -o tsv)

# Create federated credential
az ad app federated-credential create \
  --id $APP_ID \
  --parameters '{
    "name": "github-actions-main",
    "issuer": "https://token.actions.githubusercontent.com",
    "subject": "repo:YOUR_ORG/Suppercharge_Microsoft_Fabric:ref:refs/heads/main",
    "audiences": ["api://AzureADTokenExchange"]
  }'

🌐 Network Requirements¶

Outbound Connectivity¶

📋 Prerequisites: If you're behind a corporate firewall, coordinate with your network team to whitelist these endpoints before deployment.

Ensure these endpoints are accessible from your deployment environment:

Firewall Rules (if applicable)¶

# Azure services (add to allowlist)
AzureCloud.EastUS2
AzureCloud.WestUS2

ℹ️ Note: If using a corporate firewall, work with your network team to whitelist these endpoints.

✅ Pre-Deployment Checklist¶

Azure Subscription¶

Local Environment¶

Configuration Files¶

Security¶

📝 Environment Variables Reference¶

Create a .env file from .env.sample with the following values:

Required Variables¶

# Azure Configuration
AZURE_SUBSCRIPTION_ID=        # Your Azure subscription ID
AZURE_TENANT_ID=              # Your Microsoft Entra ID tenant ID
AZURE_LOCATION=eastus2        # Deployment region
ENVIRONMENT=dev               # dev, staging, or prod
PROJECT_PREFIX=fabricpoc      # 3-10 char prefix for naming

# Fabric Settings
FABRIC_CAPACITY_SKU=F64       # Capacity SKU (F2, F4, F16, F32, F64)
FABRIC_ADMIN_EMAIL=           # Admin notification email

# Resource Names (must be globally unique)
PURVIEW_ACCOUNT_NAME=         # Purview account (globally unique)
STORAGE_ACCOUNT_NAME=         # ADLS Gen2 storage (globally unique)
KEY_VAULT_NAME=               # Key Vault (globally unique)

Variable Requirements¶

⚠️ Warning: Storage account names must be globally unique across all of Azure and use only lowercase letters and numbers (no hyphens or special characters).

🧪 Validation Script¶

#!/bin/bash
# verify-prerequisites.sh

echo "=== Verifying Prerequisites ==="
echo ""

# Check Azure CLI
if ! command -v az &> /dev/null; then
    echo "❌ Azure CLI not installed"
    exit 1
else
    echo "✅ Azure CLI: $(az --version | head -1)"
fi

# Check login status
if ! az account show &> /dev/null; then
    echo "❌ Not logged into Azure"
    exit 1
else
    echo "✅ Logged into Azure: $(az account show --query name -o tsv)"
fi

# Check Bicep
if ! az bicep version &> /dev/null; then
    echo "❌ Bicep not installed"
    exit 1
else
    echo "✅ Bicep: $(az bicep version)"
fi

# Check Git
if ! command -v git &> /dev/null; then
    echo "❌ Git not installed"
else
    echo "✅ Git: $(git --version)"
fi

# Check Python
if ! command -v python &> /dev/null; then
    echo "❌ Python not installed"
else
    echo "✅ Python: $(python --version)"
fi

# Check Fabric provider
FABRIC_STATE=$(az provider show --namespace Microsoft.Fabric --query registrationState -o tsv 2>/dev/null)
if [ "$FABRIC_STATE" != "Registered" ]; then
    echo "❌ Microsoft.Fabric provider not registered"
else
    echo "✅ Microsoft.Fabric provider registered"
fi

# Check .env file
if [ ! -f ".env" ]; then
    echo "⚠️  .env file not found (copy from .env.sample)"
else
    echo "✅ .env file exists"
fi

echo ""
echo "=== Verification Complete ==="

# Make script executable (Linux/Mac)
chmod +x verify-prerequisites.sh

# Run verification
./verify-prerequisites.sh

🔧 Troubleshooting¶

# Clear cached credentials
az account clear
az cache purge
az login

# Update Bicep to latest
az bicep upgrade

# Clear Bicep cache
rm -rf ~/.bicep

# Force re-registration
az provider unregister --namespace Microsoft.Fabric
az provider register --namespace Microsoft.Fabric

# Check status
az provider show --namespace Microsoft.Fabric --query "registrationState"

📚 Next Steps¶

After completing prerequisites:

📚 Related Documentation¶

⬆️ Back to top

📖 Documentation maintained by: Microsoft Fabric POC Team 🔗 Repository: Suppercharge_Microsoft_Fabric