Microsoft Security | Microsoft Purview
A unified data governance solution that helps manage, protect, and discover data across your organization
Microsoft Fabric: Enhanced Metadata API Calls Fail (ErrorCode 3871) Despite Successful Base Access
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 91%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESD%3C/text%3E%3C/svg%3E)
Sajanie Dissanayaka
0
Reputation points
Problem description
Experiencing an issue with a Microsoft Fabric data source registered in a Purview Data Map account. The 'Test connection' operation fails when using a managed identity for enhanced metadata admin API calls, returning ErrorCode 3871 (UserErrorDataScanPowerBIBasicMetadataFailure). However, the basic connectivity check (base access) succeeds. This problem began on August 27, 2026, and persists despite verifying all prerequisites.
Microsoft Security | Microsoft Purview
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 64%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHY%3C/text%3E%3C/svg%3E)
Himaja Y 375 Reputation points Microsoft External Staff Moderator2026-09-04T13:50:04.42+00:00 Hi @Sajanie Dissanayaka ,
Thank you for providing the detailed information and for confirming that the required prerequisites have already been validated.
I understand the issue you are facing: the base connectivity test succeeds, but the enhanced metadata API call fails with ErrorCode 3871 – UserErrorDataScanPowerBIBasicMetadataFailure. Since the issue started on August 27, 2026, and the basic access path is working, this appears to be isolated to the enhanced metadata/API authorization path rather than the basic connectivity to the Fabric source.
As a next step, could you please verify the following settings in the Fabric Admin Portal?
- Tenant settings → Admin API settings → Allow service principals to use read-only admin APIs
- Please confirm that this is enabled for the security group containing the Microsoft Purview managed identity.
- Enhance admin APIs responses with detailed metadata
- Please confirm that this is enabled for the same security group.
- If applicable to the metadata being requested, please also confirm the Enhance admin APIs responses with DAX and mashup expressions setting.
Microsoft's current guidance indicates that the enhanced metadata settings depend on the read-only Admin API access setting for service principals. After making any changes to these tenant settings, Microsoft recommends waiting approximately 15 minutes before registering/testing the scan again.
Since you have already validated the prerequisites, we would prefer not to repeat the complete configuration unnecessarily. If the above settings are already correctly configured, please share the Test Connection → View Report details for the failed metadata/Assets check, along with a screenshot of the relevant Admin API settings (with any sensitive information redacted).
This will help us determine whether the failure is occurring during the Fabric Admin API authorization or while retrieving the Power BI/Fabric metadata, and we can proceed with the appropriate next step.
If convenient, please also share your availability for a quick call. We can review the configuration and test the connection together to avoid further back-and-forth.
Thank you for your patience and cooperation. We understand the impact of having the Purview scan blocked and will work with you to move this forward.
- Tenant settings → Admin API settings → Allow service principals to use read-only admin APIs
Sign in to comment
Sign in to answer