Onboarding & setup overview
This section is a runbook for administrators. Working through it once means your users get a clean experience — Icon Map loads, reads their data, and publishes maps without repeated consent popups or "access denied" prompts.
It's written for two roles, which may be the same person:
- A Microsoft Entra (Azure AD) administrator — grants tenant-wide consent to the Icon Map app.
- A Microsoft Fabric administrator — enables the workload and the required tenant settings.
Private preview
Icon Map for Fabric is in private preview. Your onboarding contact will confirm the exact application identifiers and any tenant-specific steps. If anything below doesn't match what you see, check with them before changing tenant-wide settings.
What you'll set up
| Step | Who | Why |
|---|---|---|
| Enable the workload | Fabric admin | Makes the Icon Map item types available in your tenant. |
| Grant admin consent | Entra admin | Consents to the app's permissions once, so users aren't prompted. |
| Enable tenant settings | Fabric admin | Allows the data access Icon Map relies on. |
| Set up publishing | Fabric admin | Lets published maps be embedded outside Fabric. |
| Browser & network | IT / desktop | Avoids popup-blocker and cookie issues. |
Prerequisites
- A Microsoft Fabric tenant, with workspaces backed by a Fabric capacity (a trial capacity is fine for evaluation). OneLake operations run on capacity-backed workspaces.
- Administrator access: Global Administrator or Privileged Role Administrator in Entra ID for the consent step, and Fabric Administrator for workload and tenant settings.
- The Icon Map workload made available to your tenant (arranged with your onboarding contact during the preview).
Recommended order
- Enable the Icon Map workload.
- Grant tenant-wide admin consent — this is the key step for a popup-free experience.
- Enable the required tenant settings.
- If you'll publish maps outside Fabric, set up publishing.
- Share the browser & network notes with anyone who hits sign-in issues.
Changes to Entra consent and tenant settings can take 10–30 minutes to take effect across your tenant.
Next steps
- Enable the workload — start here.
- Security & permissions — the security model behind these steps.