Hi Paul,
Why the first click fails A dashboard URL opens dataexplorer.azure.com and immediately asks the cluster for data. If the user hasn’t already
- signed in to the Web UI and
- been granted at least Viewer rights on the database/cluster, the cluster answers 403 Unauthorized. After the user visits the Web UI home page once, an AAD token + cookies are cached and the second click works—hence the “go to the app first” workaround.
Quick test
- Pick a colleague who currently needs the workaround.
- Add them to Viewer on the database.
- Ask a tenant admin to grant consent to the Azure Data Explorer enterprise app (one-off).
- Send the fresh Copy link URL.
- They should open the dashboard immediately—no “open the app first” step.
A successful one-click experience needs both a valid Data Explorer token (solved by tenant-wide consent) and a role on the underlying database/cluster. Put your coworkers in Viewer, grant org-wide consent to the first-party Azure Data Explorer app, and the shared URL will work without the extra hop. I hope it will solve your solve please check and share your feedback.
Best Regards,
Jerald Felix