SlideShare a Scribd company logo
InSpark
Erwin de Kreuk
Dealing with different Roles
in
Azure Synapse Analytics
InSpark
We help organizations
accelerating their digital
transformation with impactful
Microsoft solutions & expertise
We Are InSpark
InSpark
Roles in Azure Synapse Analytics
InSpark
Access Control
Azure Roles
Synapse Roles
SQL Roles
Git Permissions
Azure Synape
InSpark
Azure Synapse Studio
Integration Management Monitoring Security
Analytics runtimes
Azure Data Lake Storage
Azure Synapse Analytics
Resource Group Development Resource Group Production
Integration runtimes Integration runtimes
Workspace
Workspace Item
Apache Spark Pool Integration
Runtime
Linked Services Credentials
Data Engineers
Data Scientists
Azure Synapse Studio
Integration Management Monitoring Security
Analytics runtimes
Azure Data Lake Storage
Azure Synapse Analytics
Integration runtimes
Workspace
Workspace Item
Apache Spark Pool Integration
Runtime
Linked Services Credentials
InSpark
Azure Synapse Studio
Integration Management Monitoring Security
Analytics runtimes
Azure Data Lake Storage
Azure Synapse Analytics
Resource Group Development
Integration runtimes
Workspace
Workspace Item
Apache Spark Pool Integration
Runtime
Linked Services Credentials
InSpark
Azure Synapse Analytics
Resource Group Development
Azure Owner or Contributor
 Resource Group
 Create Synapse Workspace
 Manage Synapse Workspace
 Synapse Resource
 Manage Synapse Workspace
Azure Contributor
 Resource Group
 ARM templates for automated deployment
Resource Management
Azure Roles
InSpark
Azure Synapse Analytics
Resource Group Development
Azure Storage Blob Data Contributor
 User and workspace MSI
Reader
 Resource Group or Synapse Workspace
Access Management
Azure Roles
Azure Data Lake Storage
InSpark
Synapse
Administrator
Administrators
Synapse
Apache Spark
Administrator
Synapse SQL
Administrator
Synapse Data
Explorer
Administrator????
Synapse Linked Data Manager
Synapse Credential User
Synapse Contributor
Synapse Roles
InSpark
Azure Synapse Analytics
Resource Group Development
Roles:
 Synapse Administrator
 Synapse SQL Administrator
 Synapse Apache Spark Administrator
 SQL Active Directory Admin
Administrators
Synapse Roles
Azure Data Lake Storage
Analytics runtimes Integration runtimes
InSpark
Activities:
 Can read and write artifacts
 Can do all actions on Spark activities.
 Can view Spark pool logs
 Can view saved notebook and pipeline output
 Can use the secrets stored by linked services or credentials
 Can assign and revoke Synapse RBAC roles at current scope
Synapse Administrator
Synapse Roles
InSpark
Activities:
 Can do all actions on Spark artifacts
 Can do all actions on Spark activities
Synapse Apache Spark Administrator
Synapse Roles
InSpark
Activities:
 Can do all actions on SQL scripts
 Can connect to SQL serverless endpoints with SQL db_datareader,
db_datawriter, connect, and grant permissions
Synapse SQL Administrator
Synapse Roles
InSpark
Non-Administrators
Synapse Roles
Contributor
Artifact
Publisher
User
Artifact
User
Compute
Operator
Linked Data
Manager
Credential
User
InSpark
Roles:
 Synapse Contributor
 Synapse Artifact Publisher
 Synapse Artifact User
 Synapse Compute Operator
 Synapse Credential User
 Synapse Linked Data Manager
 Synapse User
Workspace
Synapse Roles
Integration runtimes
Azure Synapse Studio
Integration Management Monitoring Security
Analytics runtimes
Azure Data Lake Storage
Azure Synapse Analytics
Resource Group Development
Integration runtimes
Workspace
InSpark
Workspace
InSpark
Workspace Items
Synapse Roles
InSpark
Item:
 Linked Service
 Apache Spark Pool
 Integration Runtime
 Credentials
Workspace Item
Synapse Roles
Azure Synapse Studio
Integration Management Monitoring Security
Analytics runtimes
Azure Data Lake Storage
Azure Synapse Analytics
Resource Group Development
Integration runtimes
Workspace
Workspace Item
Apache Spark Pool Integration
Runtime
Linked Services Credentials
InSpark
 Role assignment on Workspace or Workspace Item
 Needs to be Synapse Administrator
 Can also be a guest user
 No Synapse Administrator
 Contributor or Owner on the Workspace
 Advice! => create role assignments based on
Security Groups
 Changes in assignments will take up 2-5 minutes
 Changes in SG can take 10-15 minutes
Role Assignment
Synapse Roles
InSpark
 No access message in Azure Portal
 https://web.azuresynapse.net
Tips and Tricks
Synapse Roles
InSpark
 No access message in Azure Portal
 https://web.azuresynapse
 Power BI
 Access is defined on Power BI workspace level
Tips and Tricks
Synapse Roles
InSpark
 No access message in Azure Portal
 https://web.azuresynapse
 Power BI
 Access is defined on Power BI workspace level
 Publish Error
Tips and Tricks
Synapse Roles
InSpark
Administrator
Contributor
Artifact
Publisher
Apache
Spark
Administrator
SQL
Administrator
Artifact
User
Compute
Operator
Credential
User
Linked
Data
Manager
User
workspaces/read
workspaces/roleAssignments/write, delete
workspaces/managedPrivateEndpoint/write, delete
workspaces/bigDataPools/useCompute/action
workspaces/bigDataPools/viewLogs/action
workspaces/integrationRuntimes/useCompute/action
workspaces/integrationRuntimes/viewLogs/action
workspaces/artifacts/read
workspaces/notebooks/write, delete
workspaces/sparkJobDefinitions/write, delete
workspaces/sqlScripts/write, delete
workspaces/kqlScripts/write, delete
workspaces/dataFlows/write, delete
workspaces/pipelines/write, delete
workspaces/triggers/write, delete
workspaces/datasets/write, delete
workspaces/libraries/write, delete
workspaces/linkedServices/write, delete
workspaces/credentials/write, delete
workspaces/notebooks/viewOutputs/action
workspaces/pipelines/viewOutputs/action
workspaces/linkedServices/useSecret/action
workspaces/credentials/useSecret/action
Role actions
Synapse Roles
InSpark
Demo
InSpark
SQL
InSpark
Synapse Administrator:
 db_owner (DBO) permissions on the ‘Built-In’
serverless SQL pool
Synapse SQL Administrator:
 Can do all actions on SQL scripts
 Can connect to SQL serverless endpoints with SQL
db_datareader, db_datawriter, connect, and grant
permissions
Serverless SQL Pool
SQL
Serverless
InSpark
Synapse Administrator:
 Full access to data in dedicated SQL pools
 Grant access to other users
 Perform configuration and maintenance activities
 Can't drop dedicated SQL pools
Synapse SQL Administrator:
 No access by default
Active Directory Admin:
 Full access
Dedicated SQL Pool
SQL
Dedicated
InSpark
Serverless SQL pool:
Dedicated SQL pool:
SQL Pools
SQL
Dedicated
Serverless
use master
go
CREATE LOGIN [erwin.de.kreuk@demo.com] FROM EXTERNAL PROVIDER;
go
use yourdb -- Use your database name
go
CREATE USER demouser FROM LOGIN [erwin.de.kreuk@demo.com];
use yourdb -- Use your database name
go
alter role db_owner Add member demouser
--Create user in the database
CREATE USER [erwin.dekreuk@gmail.com] FROM EXTERNAL PROVIDER;
--Grant role to the user in the database
EXEC sp_addrolemember 'db_owner', 'erwin.dekreuk@gmail.com';
InSpark
Demo
InSpark
Azure Dev Ops:
 Basic user settings
 Azure Artifact Publisher
 Azure Contributor (Azure RBAC) or higher role on
the Synapse workspace
Dev Ops Service Connection:
 Azure Contributor (Azure RBAC) or higher role on
the Resource Group
 Azure Synapse Administrator
Azure Dev Ops
GIT Integration
InSpark
Azure Synapse Studio
Integration Management Monitoring Security
Analytics runtimes
Azure Data Lake Storage
Azure Synapse Analytics
Azure Synapse Studio
Integration Management Monitoring Security
Azure Data Lake Storage
Azure Synapse Analytics
Resource Group Development Resource Group Production
Integration runtimes Analytics runtimes Integration runtimes
Workspace
Workspace Item
Apache Spark Pool Integration
Runtime
Linked Services Credentials
Workspace Item
Apache Spark Pool Integration
Runtime
Linked Services Credentials
Workspace
Data Engineers
Data Scientists
InSpark
Data Engineers
 Needs to access SQL Serverless
 Publish or edit Code
 Debug pipelines
Data Scientist:
 Needs to access SQL Serverless
 Needs access to a specified Spark Pool
 Publish or edit Code
 Submit Spark Jobs
Security Groups
Azure Synapse Studio
Integration Management Monitoring Security
Analytics runtimes
Azure Data Lake Storage
Azure Synapse Analytics
Resource Group Development
Integration runtimes
Workspace
Workspace Item
Apache Spark Pool Integration
Runtime
Linked Services Credentials
Data Engineers
Data Scientists
InSpark
Demo
InSpark
 Acces to Azure Synapse Studio
 Create SQL Pools/Spark Pools /Data Explorer
Pools
 Execute Notebooks
 View and edit code Artifacts
 Debug or Trigger Pipelines
 Monitor
 Publish Code
Recap
Azure Synapse
Azure Synapse Studio
Integration Management Monitoring Security
Analytics runtimes
Azure Data Lake Storage
Azure Synapse Analytics
Resource Group Development
Integration runtimes
Workspace
Workspace Item
Apache Spark Pool Integration
Runtime
Linked Services Credentials
Data Engineers
Data Scientists
InSpark
@erwindekreuk
https://www.linkedin.com/in/erwindekreuk/
https://erwindekreuk.com
Slides will be available on my blog
InSpark

More Related Content

What's hot

Introduction to Azure Databricks
Introduction to Azure DatabricksIntroduction to Azure Databricks
Introduction to Azure Databricks
James Serra
 
AZ-204 : Implement Azure security
AZ-204 : Implement Azure securityAZ-204 : Implement Azure security
AZ-204 : Implement Azure security
AzureEzy1
 
Microsoft azure backup overview
Microsoft azure backup overviewMicrosoft azure backup overview
Microsoft azure backup overview
Sumantro Mukherjee
 
Novell ZENworks Patch Management Best Practices
Novell ZENworks Patch Management Best PracticesNovell ZENworks Patch Management Best Practices
Novell ZENworks Patch Management Best Practices
Novell
 
Azure Synapse 101 Webinar Presentation
Azure Synapse 101 Webinar PresentationAzure Synapse 101 Webinar Presentation
Azure Synapse 101 Webinar Presentation
Matthew W. Bowers
 
Migrate to Microsoft Azure with Confidence
Migrate to Microsoft Azure with ConfidenceMigrate to Microsoft Azure with Confidence
Migrate to Microsoft Azure with Confidence
David J Rosenthal
 
DevOps for Databricks
DevOps for DatabricksDevOps for Databricks
DevOps for Databricks
Databricks
 
Azure Governance
Azure GovernanceAzure Governance
Azure Governance
Benjamin Hüpeden
 
Azure DataBricks for Data Engineering by Eugene Polonichko
Azure DataBricks for Data Engineering by Eugene PolonichkoAzure DataBricks for Data Engineering by Eugene Polonichko
Azure DataBricks for Data Engineering by Eugene Polonichko
Dimko Zhluktenko
 
Time to Talk about Data Mesh
Time to Talk about Data MeshTime to Talk about Data Mesh
Time to Talk about Data Mesh
LibbySchulze
 
Azure Synapse Analytics Overview (r2)
Azure Synapse Analytics Overview (r2)Azure Synapse Analytics Overview (r2)
Azure Synapse Analytics Overview (r2)
James Serra
 
Windows Azure Active Directory
Windows Azure Active DirectoryWindows Azure Active Directory
Windows Azure Active Directory
Krunal Trivedi
 
Oracle Cloud Infrastructure.pptx
Oracle Cloud Infrastructure.pptxOracle Cloud Infrastructure.pptx
Oracle Cloud Infrastructure.pptx
GarvitNTT
 
Building a Data Lake on AWS
Building a Data Lake on AWSBuilding a Data Lake on AWS
Building a Data Lake on AWS
Amazon Web Services
 
Azure Data Factory | Moving On-Premise Data to Azure Cloud | Microsoft Azure ...
Azure Data Factory | Moving On-Premise Data to Azure Cloud | Microsoft Azure ...Azure Data Factory | Moving On-Premise Data to Azure Cloud | Microsoft Azure ...
Azure Data Factory | Moving On-Premise Data to Azure Cloud | Microsoft Azure ...
Edureka!
 
Microsoft Azure Technical Overview
Microsoft Azure Technical OverviewMicrosoft Azure Technical Overview
Microsoft Azure Technical Overview
gjuljo
 
Azure Security Overview
Azure Security OverviewAzure Security Overview
Azure Security Overview
David J Rosenthal
 
Databricks Fundamentals
Databricks FundamentalsDatabricks Fundamentals
Databricks Fundamentals
Dalibor Wijas
 
Introduction to Azure monitor
Introduction to Azure monitorIntroduction to Azure monitor
Introduction to Azure monitor
Praveen Nair
 
Introduction to AWS Lake Formation.pptx
Introduction to AWS Lake Formation.pptxIntroduction to AWS Lake Formation.pptx
Introduction to AWS Lake Formation.pptx
SwathiPonugumati
 

What's hot (20)

Introduction to Azure Databricks
Introduction to Azure DatabricksIntroduction to Azure Databricks
Introduction to Azure Databricks
 
AZ-204 : Implement Azure security
AZ-204 : Implement Azure securityAZ-204 : Implement Azure security
AZ-204 : Implement Azure security
 
Microsoft azure backup overview
Microsoft azure backup overviewMicrosoft azure backup overview
Microsoft azure backup overview
 
Novell ZENworks Patch Management Best Practices
Novell ZENworks Patch Management Best PracticesNovell ZENworks Patch Management Best Practices
Novell ZENworks Patch Management Best Practices
 
Azure Synapse 101 Webinar Presentation
Azure Synapse 101 Webinar PresentationAzure Synapse 101 Webinar Presentation
Azure Synapse 101 Webinar Presentation
 
Migrate to Microsoft Azure with Confidence
Migrate to Microsoft Azure with ConfidenceMigrate to Microsoft Azure with Confidence
Migrate to Microsoft Azure with Confidence
 
DevOps for Databricks
DevOps for DatabricksDevOps for Databricks
DevOps for Databricks
 
Azure Governance
Azure GovernanceAzure Governance
Azure Governance
 
Azure DataBricks for Data Engineering by Eugene Polonichko
Azure DataBricks for Data Engineering by Eugene PolonichkoAzure DataBricks for Data Engineering by Eugene Polonichko
Azure DataBricks for Data Engineering by Eugene Polonichko
 
Time to Talk about Data Mesh
Time to Talk about Data MeshTime to Talk about Data Mesh
Time to Talk about Data Mesh
 
Azure Synapse Analytics Overview (r2)
Azure Synapse Analytics Overview (r2)Azure Synapse Analytics Overview (r2)
Azure Synapse Analytics Overview (r2)
 
Windows Azure Active Directory
Windows Azure Active DirectoryWindows Azure Active Directory
Windows Azure Active Directory
 
Oracle Cloud Infrastructure.pptx
Oracle Cloud Infrastructure.pptxOracle Cloud Infrastructure.pptx
Oracle Cloud Infrastructure.pptx
 
Building a Data Lake on AWS
Building a Data Lake on AWSBuilding a Data Lake on AWS
Building a Data Lake on AWS
 
Azure Data Factory | Moving On-Premise Data to Azure Cloud | Microsoft Azure ...
Azure Data Factory | Moving On-Premise Data to Azure Cloud | Microsoft Azure ...Azure Data Factory | Moving On-Premise Data to Azure Cloud | Microsoft Azure ...
Azure Data Factory | Moving On-Premise Data to Azure Cloud | Microsoft Azure ...
 
Microsoft Azure Technical Overview
Microsoft Azure Technical OverviewMicrosoft Azure Technical Overview
Microsoft Azure Technical Overview
 
Azure Security Overview
Azure Security OverviewAzure Security Overview
Azure Security Overview
 
Databricks Fundamentals
Databricks FundamentalsDatabricks Fundamentals
Databricks Fundamentals
 
Introduction to Azure monitor
Introduction to Azure monitorIntroduction to Azure monitor
Introduction to Azure monitor
 
Introduction to AWS Lake Formation.pptx
Introduction to AWS Lake Formation.pptxIntroduction to AWS Lake Formation.pptx
Introduction to AWS Lake Formation.pptx
 

Similar to Dealing with different Synapse Roles in Azure Synapse Analytics Erwin de Kreuk

SQL KONFERENZ 2020 Azure Key Vault, Azure Dev Ops and Azure Data Factory how...
SQL KONFERENZ 2020  Azure Key Vault, Azure Dev Ops and Azure Data Factory how...SQL KONFERENZ 2020  Azure Key Vault, Azure Dev Ops and Azure Data Factory how...
SQL KONFERENZ 2020 Azure Key Vault, Azure Dev Ops and Azure Data Factory how...
Erwin de Kreuk
 
Lake Database Database Template Map Data in Azure Synapse Analytics
Lake Database  Database Template  Map Data in Azure Synapse AnalyticsLake Database  Database Template  Map Data in Azure Synapse Analytics
Lake Database Database Template Map Data in Azure Synapse Analytics
Erwin de Kreuk
 
Integrating Jira Software Cloud With the AWS Code Suite
Integrating Jira Software Cloud With the AWS Code SuiteIntegrating Jira Software Cloud With the AWS Code Suite
Integrating Jira Software Cloud With the AWS Code Suite
Atlassian
 
TechnoramaNL Azure Key Vault, Azure Dev Ops and Azure Data Factor
TechnoramaNL Azure Key Vault, Azure Dev Ops and Azure Data FactorTechnoramaNL Azure Key Vault, Azure Dev Ops and Azure Data Factor
TechnoramaNL Azure Key Vault, Azure Dev Ops and Azure Data Factor
Erwin de Kreuk
 
DataSaturdayNL 2019 Azure Key Vault, Azure Dev Ops and Azure Data Factory h...
DataSaturdayNL 2019  Azure Key Vault, Azure Dev Ops and Azure Data Factory  h...DataSaturdayNL 2019  Azure Key Vault, Azure Dev Ops and Azure Data Factory  h...
DataSaturdayNL 2019 Azure Key Vault, Azure Dev Ops and Azure Data Factory h...
Erwin de Kreuk
 
DatamindsConnect2019 Azure Key Vault, Azure Dev Ops and Azure Data Factory ho...
DatamindsConnect2019 Azure Key Vault, Azure Dev Ops and Azure Data Factory ho...DatamindsConnect2019 Azure Key Vault, Azure Dev Ops and Azure Data Factory ho...
DatamindsConnect2019 Azure Key Vault, Azure Dev Ops and Azure Data Factory ho...
Erwin de Kreuk
 
Continuous Integration and Deployment Best Practices on AWS (ARC307) | AWS re...
Continuous Integration and Deployment Best Practices on AWS (ARC307) | AWS re...Continuous Integration and Deployment Best Practices on AWS (ARC307) | AWS re...
Continuous Integration and Deployment Best Practices on AWS (ARC307) | AWS re...
Amazon Web Services
 
Continuous Deployment @ AWS Re:Invent
Continuous Deployment @ AWS Re:InventContinuous Deployment @ AWS Re:Invent
Continuous Deployment @ AWS Re:Invent
John Schneider
 
Full Stack Scala
Full Stack ScalaFull Stack Scala
Full Stack Scala
Ramnivas Laddad
 
Azure Resource Manager templates: Improve deployment time and reusability
Azure Resource Manager templates: Improve deployment time and reusabilityAzure Resource Manager templates: Improve deployment time and reusability
Azure Resource Manager templates: Improve deployment time and reusability
Stephane Lapointe
 
Azure Data.pptx
Azure Data.pptxAzure Data.pptx
Azure Data.pptx
FedoRam1
 
ABD215_Serverless Data Prep with AWS Glue
ABD215_Serverless Data Prep with AWS GlueABD215_Serverless Data Prep with AWS Glue
ABD215_Serverless Data Prep with AWS Glue
Amazon Web Services
 
ABD215_Serverless Data Prep with AWS Glue
ABD215_Serverless Data Prep with AWS GlueABD215_Serverless Data Prep with AWS Glue
ABD215_Serverless Data Prep with AWS Glue
Amazon Web Services
 
Making sense of Microsoft Identities in a Hybrid world
Making sense of Microsoft Identities in a Hybrid worldMaking sense of Microsoft Identities in a Hybrid world
Making sense of Microsoft Identities in a Hybrid world
Jason Himmelstein
 
Microsoft ignite 2018 SQL server 2019 big data clusters - deep dive session
Microsoft ignite 2018 SQL server 2019 big data clusters - deep dive sessionMicrosoft ignite 2018 SQL server 2019 big data clusters - deep dive session
Microsoft ignite 2018 SQL server 2019 big data clusters - deep dive session
Travis Wright
 
Synapse for mere mortals
Synapse for mere mortalsSynapse for mere mortals
Synapse for mere mortals
Michael Stephenson
 
Streamline Hadoop DevOps with Apache Ambari
Streamline Hadoop DevOps with Apache AmbariStreamline Hadoop DevOps with Apache Ambari
Streamline Hadoop DevOps with Apache Ambari
Alejandro Fernandez
 
Machine learning services with SQL Server 2017
Machine learning services with SQL Server 2017Machine learning services with SQL Server 2017
Machine learning services with SQL Server 2017
Mark Tabladillo
 
Building data pipelines for modern data warehouse with Apache® Spark™ and .NE...
Building data pipelines for modern data warehouse with Apache® Spark™ and .NE...Building data pipelines for modern data warehouse with Apache® Spark™ and .NE...
Building data pipelines for modern data warehouse with Apache® Spark™ and .NE...
Michael Rys
 
Windows Azure IaaS and Hybrid, a customer tale
Windows Azure IaaS and Hybrid, a customer taleWindows Azure IaaS and Hybrid, a customer tale
Windows Azure IaaS and Hybrid, a customer tale
Mike Martin
 

Similar to Dealing with different Synapse Roles in Azure Synapse Analytics Erwin de Kreuk (20)

SQL KONFERENZ 2020 Azure Key Vault, Azure Dev Ops and Azure Data Factory how...
SQL KONFERENZ 2020  Azure Key Vault, Azure Dev Ops and Azure Data Factory how...SQL KONFERENZ 2020  Azure Key Vault, Azure Dev Ops and Azure Data Factory how...
SQL KONFERENZ 2020 Azure Key Vault, Azure Dev Ops and Azure Data Factory how...
 
Lake Database Database Template Map Data in Azure Synapse Analytics
Lake Database  Database Template  Map Data in Azure Synapse AnalyticsLake Database  Database Template  Map Data in Azure Synapse Analytics
Lake Database Database Template Map Data in Azure Synapse Analytics
 
Integrating Jira Software Cloud With the AWS Code Suite
Integrating Jira Software Cloud With the AWS Code SuiteIntegrating Jira Software Cloud With the AWS Code Suite
Integrating Jira Software Cloud With the AWS Code Suite
 
TechnoramaNL Azure Key Vault, Azure Dev Ops and Azure Data Factor
TechnoramaNL Azure Key Vault, Azure Dev Ops and Azure Data FactorTechnoramaNL Azure Key Vault, Azure Dev Ops and Azure Data Factor
TechnoramaNL Azure Key Vault, Azure Dev Ops and Azure Data Factor
 
DataSaturdayNL 2019 Azure Key Vault, Azure Dev Ops and Azure Data Factory h...
DataSaturdayNL 2019  Azure Key Vault, Azure Dev Ops and Azure Data Factory  h...DataSaturdayNL 2019  Azure Key Vault, Azure Dev Ops and Azure Data Factory  h...
DataSaturdayNL 2019 Azure Key Vault, Azure Dev Ops and Azure Data Factory h...
 
DatamindsConnect2019 Azure Key Vault, Azure Dev Ops and Azure Data Factory ho...
DatamindsConnect2019 Azure Key Vault, Azure Dev Ops and Azure Data Factory ho...DatamindsConnect2019 Azure Key Vault, Azure Dev Ops and Azure Data Factory ho...
DatamindsConnect2019 Azure Key Vault, Azure Dev Ops and Azure Data Factory ho...
 
Continuous Integration and Deployment Best Practices on AWS (ARC307) | AWS re...
Continuous Integration and Deployment Best Practices on AWS (ARC307) | AWS re...Continuous Integration and Deployment Best Practices on AWS (ARC307) | AWS re...
Continuous Integration and Deployment Best Practices on AWS (ARC307) | AWS re...
 
Continuous Deployment @ AWS Re:Invent
Continuous Deployment @ AWS Re:InventContinuous Deployment @ AWS Re:Invent
Continuous Deployment @ AWS Re:Invent
 
Full Stack Scala
Full Stack ScalaFull Stack Scala
Full Stack Scala
 
Azure Resource Manager templates: Improve deployment time and reusability
Azure Resource Manager templates: Improve deployment time and reusabilityAzure Resource Manager templates: Improve deployment time and reusability
Azure Resource Manager templates: Improve deployment time and reusability
 
Azure Data.pptx
Azure Data.pptxAzure Data.pptx
Azure Data.pptx
 
ABD215_Serverless Data Prep with AWS Glue
ABD215_Serverless Data Prep with AWS GlueABD215_Serverless Data Prep with AWS Glue
ABD215_Serverless Data Prep with AWS Glue
 
ABD215_Serverless Data Prep with AWS Glue
ABD215_Serverless Data Prep with AWS GlueABD215_Serverless Data Prep with AWS Glue
ABD215_Serverless Data Prep with AWS Glue
 
Making sense of Microsoft Identities in a Hybrid world
Making sense of Microsoft Identities in a Hybrid worldMaking sense of Microsoft Identities in a Hybrid world
Making sense of Microsoft Identities in a Hybrid world
 
Microsoft ignite 2018 SQL server 2019 big data clusters - deep dive session
Microsoft ignite 2018 SQL server 2019 big data clusters - deep dive sessionMicrosoft ignite 2018 SQL server 2019 big data clusters - deep dive session
Microsoft ignite 2018 SQL server 2019 big data clusters - deep dive session
 
Synapse for mere mortals
Synapse for mere mortalsSynapse for mere mortals
Synapse for mere mortals
 
Streamline Hadoop DevOps with Apache Ambari
Streamline Hadoop DevOps with Apache AmbariStreamline Hadoop DevOps with Apache Ambari
Streamline Hadoop DevOps with Apache Ambari
 
Machine learning services with SQL Server 2017
Machine learning services with SQL Server 2017Machine learning services with SQL Server 2017
Machine learning services with SQL Server 2017
 
Building data pipelines for modern data warehouse with Apache® Spark™ and .NE...
Building data pipelines for modern data warehouse with Apache® Spark™ and .NE...Building data pipelines for modern data warehouse with Apache® Spark™ and .NE...
Building data pipelines for modern data warehouse with Apache® Spark™ and .NE...
 
Windows Azure IaaS and Hybrid, a customer tale
Windows Azure IaaS and Hybrid, a customer taleWindows Azure IaaS and Hybrid, a customer tale
Windows Azure IaaS and Hybrid, a customer tale
 

More from Erwin de Kreuk

DataMinds 2022 Azure Purview Erwin de Kreuk
DataMinds 2022 Azure Purview Erwin de KreukDataMinds 2022 Azure Purview Erwin de Kreuk
DataMinds 2022 Azure Purview Erwin de Kreuk
Erwin de Kreuk
 
Data weekender4.2 azure purview erwin de kreuk
Data weekender4.2  azure purview erwin de kreukData weekender4.2  azure purview erwin de kreuk
Data weekender4.2 azure purview erwin de kreuk
Erwin de Kreuk
 
Data saturday Oslo Azure Purview Erwin de Kreuk
Data saturday Oslo Azure Purview Erwin de KreukData saturday Oslo Azure Purview Erwin de Kreuk
Data saturday Oslo Azure Purview Erwin de Kreuk
Erwin de Kreuk
 
Is there a way that we can build our Azure Synapse Pipelines all with paramet...
Is there a way that we can build our Azure Synapse Pipelines all with paramet...Is there a way that we can build our Azure Synapse Pipelines all with paramet...
Is there a way that we can build our Azure Synapse Pipelines all with paramet...
Erwin de Kreuk
 
Is there a way that we can build our Azure Data Factory all with parameters b...
Is there a way that we can build our Azure Data Factory all with parameters b...Is there a way that we can build our Azure Data Factory all with parameters b...
Is there a way that we can build our Azure Data Factory all with parameters b...
Erwin de Kreuk
 
Datasaturday Pordenone Azure Purview Erwin de Kreuk
Datasaturday Pordenone Azure Purview Erwin de KreukDatasaturday Pordenone Azure Purview Erwin de Kreuk
Datasaturday Pordenone Azure Purview Erwin de Kreuk
Erwin de Kreuk
 
Azure Purview Data Toboggan Erwin de Kreuk
Azure Purview Data Toboggan Erwin de KreukAzure Purview Data Toboggan Erwin de Kreuk
Azure Purview Data Toboggan Erwin de Kreuk
Erwin de Kreuk
 
Help, I need to migrate my On Premise Database to Azure, which Database Tier ...
Help, I need to migrate my On Premise Database to Azure, which Database Tier ...Help, I need to migrate my On Premise Database to Azure, which Database Tier ...
Help, I need to migrate my On Premise Database to Azure, which Database Tier ...
Erwin de Kreuk
 

More from Erwin de Kreuk (8)

DataMinds 2022 Azure Purview Erwin de Kreuk
DataMinds 2022 Azure Purview Erwin de KreukDataMinds 2022 Azure Purview Erwin de Kreuk
DataMinds 2022 Azure Purview Erwin de Kreuk
 
Data weekender4.2 azure purview erwin de kreuk
Data weekender4.2  azure purview erwin de kreukData weekender4.2  azure purview erwin de kreuk
Data weekender4.2 azure purview erwin de kreuk
 
Data saturday Oslo Azure Purview Erwin de Kreuk
Data saturday Oslo Azure Purview Erwin de KreukData saturday Oslo Azure Purview Erwin de Kreuk
Data saturday Oslo Azure Purview Erwin de Kreuk
 
Is there a way that we can build our Azure Synapse Pipelines all with paramet...
Is there a way that we can build our Azure Synapse Pipelines all with paramet...Is there a way that we can build our Azure Synapse Pipelines all with paramet...
Is there a way that we can build our Azure Synapse Pipelines all with paramet...
 
Is there a way that we can build our Azure Data Factory all with parameters b...
Is there a way that we can build our Azure Data Factory all with parameters b...Is there a way that we can build our Azure Data Factory all with parameters b...
Is there a way that we can build our Azure Data Factory all with parameters b...
 
Datasaturday Pordenone Azure Purview Erwin de Kreuk
Datasaturday Pordenone Azure Purview Erwin de KreukDatasaturday Pordenone Azure Purview Erwin de Kreuk
Datasaturday Pordenone Azure Purview Erwin de Kreuk
 
Azure Purview Data Toboggan Erwin de Kreuk
Azure Purview Data Toboggan Erwin de KreukAzure Purview Data Toboggan Erwin de Kreuk
Azure Purview Data Toboggan Erwin de Kreuk
 
Help, I need to migrate my On Premise Database to Azure, which Database Tier ...
Help, I need to migrate my On Premise Database to Azure, which Database Tier ...Help, I need to migrate my On Premise Database to Azure, which Database Tier ...
Help, I need to migrate my On Premise Database to Azure, which Database Tier ...
 

Recently uploaded

Levelwise PageRank with Loop-Based Dead End Handling Strategy : SHORT REPORT ...
Levelwise PageRank with Loop-Based Dead End Handling Strategy : SHORT REPORT ...Levelwise PageRank with Loop-Based Dead End Handling Strategy : SHORT REPORT ...
Levelwise PageRank with Loop-Based Dead End Handling Strategy : SHORT REPORT ...
Subhajit Sahu
 
一比一原版(CBU毕业证)卡普顿大学毕业证成绩单
一比一原版(CBU毕业证)卡普顿大学毕业证成绩单一比一原版(CBU毕业证)卡普顿大学毕业证成绩单
一比一原版(CBU毕业证)卡普顿大学毕业证成绩单
nscud
 
FP Growth Algorithm and its Applications
FP Growth Algorithm and its ApplicationsFP Growth Algorithm and its Applications
FP Growth Algorithm and its Applications
MaleehaSheikh2
 
一比一原版(TWU毕业证)西三一大学毕业证成绩单
一比一原版(TWU毕业证)西三一大学毕业证成绩单一比一原版(TWU毕业证)西三一大学毕业证成绩单
一比一原版(TWU毕业证)西三一大学毕业证成绩单
ocavb
 
The affect of service quality and online reviews on customer loyalty in the E...
The affect of service quality and online reviews on customer loyalty in the E...The affect of service quality and online reviews on customer loyalty in the E...
The affect of service quality and online reviews on customer loyalty in the E...
jerlynmaetalle
 
做(mqu毕业证书)麦考瑞大学毕业证硕士文凭证书学费发票原版一模一样
做(mqu毕业证书)麦考瑞大学毕业证硕士文凭证书学费发票原版一模一样做(mqu毕业证书)麦考瑞大学毕业证硕士文凭证书学费发票原版一模一样
做(mqu毕业证书)麦考瑞大学毕业证硕士文凭证书学费发票原版一模一样
axoqas
 
tapal brand analysis PPT slide for comptetive data
tapal brand analysis PPT slide for comptetive datatapal brand analysis PPT slide for comptetive data
tapal brand analysis PPT slide for comptetive data
theahmadsaood
 
Best best suvichar in gujarati english meaning of this sentence as Silk road ...
Best best suvichar in gujarati english meaning of this sentence as Silk road ...Best best suvichar in gujarati english meaning of this sentence as Silk road ...
Best best suvichar in gujarati english meaning of this sentence as Silk road ...
AbhimanyuSinha9
 
Criminal IP - Threat Hunting Webinar.pdf
Criminal IP - Threat Hunting Webinar.pdfCriminal IP - Threat Hunting Webinar.pdf
Criminal IP - Threat Hunting Webinar.pdf
Criminal IP
 
一比一原版(UofM毕业证)明尼苏达大学毕业证成绩单
一比一原版(UofM毕业证)明尼苏达大学毕业证成绩单一比一原版(UofM毕业证)明尼苏达大学毕业证成绩单
一比一原版(UofM毕业证)明尼苏达大学毕业证成绩单
ewymefz
 
1.Seydhcuxhxyxhccuuxuxyxyxmisolids 2019.pptx
1.Seydhcuxhxyxhccuuxuxyxyxmisolids 2019.pptx1.Seydhcuxhxyxhccuuxuxyxyxmisolids 2019.pptx
1.Seydhcuxhxyxhccuuxuxyxyxmisolids 2019.pptx
Tiktokethiodaily
 
社内勉強会資料_LLM Agents                              .
社内勉強会資料_LLM Agents                              .社内勉強会資料_LLM Agents                              .
社内勉強会資料_LLM Agents                              .
NABLAS株式会社
 
SOCRadar Germany 2024 Threat Landscape Report
SOCRadar Germany 2024 Threat Landscape ReportSOCRadar Germany 2024 Threat Landscape Report
SOCRadar Germany 2024 Threat Landscape Report
SOCRadar
 
一比一原版(UMich毕业证)密歇根大学|安娜堡分校毕业证成绩单
一比一原版(UMich毕业证)密歇根大学|安娜堡分校毕业证成绩单一比一原版(UMich毕业证)密歇根大学|安娜堡分校毕业证成绩单
一比一原版(UMich毕业证)密歇根大学|安娜堡分校毕业证成绩单
ewymefz
 
一比一原版(NYU毕业证)纽约大学毕业证成绩单
一比一原版(NYU毕业证)纽约大学毕业证成绩单一比一原版(NYU毕业证)纽约大学毕业证成绩单
一比一原版(NYU毕业证)纽约大学毕业证成绩单
ewymefz
 
Investigate & Recover / StarCompliance.io / Crypto_Crimes
Investigate & Recover / StarCompliance.io / Crypto_CrimesInvestigate & Recover / StarCompliance.io / Crypto_Crimes
Investigate & Recover / StarCompliance.io / Crypto_Crimes
StarCompliance.io
 
Algorithmic optimizations for Dynamic Levelwise PageRank (from STICD) : SHORT...
Algorithmic optimizations for Dynamic Levelwise PageRank (from STICD) : SHORT...Algorithmic optimizations for Dynamic Levelwise PageRank (from STICD) : SHORT...
Algorithmic optimizations for Dynamic Levelwise PageRank (from STICD) : SHORT...
Subhajit Sahu
 
一比一原版(UVic毕业证)维多利亚大学毕业证成绩单
一比一原版(UVic毕业证)维多利亚大学毕业证成绩单一比一原版(UVic毕业证)维多利亚大学毕业证成绩单
一比一原版(UVic毕业证)维多利亚大学毕业证成绩单
ukgaet
 
Chatty Kathy - UNC Bootcamp Final Project Presentation - Final Version - 5.23...
Chatty Kathy - UNC Bootcamp Final Project Presentation - Final Version - 5.23...Chatty Kathy - UNC Bootcamp Final Project Presentation - Final Version - 5.23...
Chatty Kathy - UNC Bootcamp Final Project Presentation - Final Version - 5.23...
John Andrews
 
一比一原版(CBU毕业证)不列颠海角大学毕业证成绩单
一比一原版(CBU毕业证)不列颠海角大学毕业证成绩单一比一原版(CBU毕业证)不列颠海角大学毕业证成绩单
一比一原版(CBU毕业证)不列颠海角大学毕业证成绩单
nscud
 

Recently uploaded (20)

Levelwise PageRank with Loop-Based Dead End Handling Strategy : SHORT REPORT ...
Levelwise PageRank with Loop-Based Dead End Handling Strategy : SHORT REPORT ...Levelwise PageRank with Loop-Based Dead End Handling Strategy : SHORT REPORT ...
Levelwise PageRank with Loop-Based Dead End Handling Strategy : SHORT REPORT ...
 
一比一原版(CBU毕业证)卡普顿大学毕业证成绩单
一比一原版(CBU毕业证)卡普顿大学毕业证成绩单一比一原版(CBU毕业证)卡普顿大学毕业证成绩单
一比一原版(CBU毕业证)卡普顿大学毕业证成绩单
 
FP Growth Algorithm and its Applications
FP Growth Algorithm and its ApplicationsFP Growth Algorithm and its Applications
FP Growth Algorithm and its Applications
 
一比一原版(TWU毕业证)西三一大学毕业证成绩单
一比一原版(TWU毕业证)西三一大学毕业证成绩单一比一原版(TWU毕业证)西三一大学毕业证成绩单
一比一原版(TWU毕业证)西三一大学毕业证成绩单
 
The affect of service quality and online reviews on customer loyalty in the E...
The affect of service quality and online reviews on customer loyalty in the E...The affect of service quality and online reviews on customer loyalty in the E...
The affect of service quality and online reviews on customer loyalty in the E...
 
做(mqu毕业证书)麦考瑞大学毕业证硕士文凭证书学费发票原版一模一样
做(mqu毕业证书)麦考瑞大学毕业证硕士文凭证书学费发票原版一模一样做(mqu毕业证书)麦考瑞大学毕业证硕士文凭证书学费发票原版一模一样
做(mqu毕业证书)麦考瑞大学毕业证硕士文凭证书学费发票原版一模一样
 
tapal brand analysis PPT slide for comptetive data
tapal brand analysis PPT slide for comptetive datatapal brand analysis PPT slide for comptetive data
tapal brand analysis PPT slide for comptetive data
 
Best best suvichar in gujarati english meaning of this sentence as Silk road ...
Best best suvichar in gujarati english meaning of this sentence as Silk road ...Best best suvichar in gujarati english meaning of this sentence as Silk road ...
Best best suvichar in gujarati english meaning of this sentence as Silk road ...
 
Criminal IP - Threat Hunting Webinar.pdf
Criminal IP - Threat Hunting Webinar.pdfCriminal IP - Threat Hunting Webinar.pdf
Criminal IP - Threat Hunting Webinar.pdf
 
一比一原版(UofM毕业证)明尼苏达大学毕业证成绩单
一比一原版(UofM毕业证)明尼苏达大学毕业证成绩单一比一原版(UofM毕业证)明尼苏达大学毕业证成绩单
一比一原版(UofM毕业证)明尼苏达大学毕业证成绩单
 
1.Seydhcuxhxyxhccuuxuxyxyxmisolids 2019.pptx
1.Seydhcuxhxyxhccuuxuxyxyxmisolids 2019.pptx1.Seydhcuxhxyxhccuuxuxyxyxmisolids 2019.pptx
1.Seydhcuxhxyxhccuuxuxyxyxmisolids 2019.pptx
 
社内勉強会資料_LLM Agents                              .
社内勉強会資料_LLM Agents                              .社内勉強会資料_LLM Agents                              .
社内勉強会資料_LLM Agents                              .
 
SOCRadar Germany 2024 Threat Landscape Report
SOCRadar Germany 2024 Threat Landscape ReportSOCRadar Germany 2024 Threat Landscape Report
SOCRadar Germany 2024 Threat Landscape Report
 
一比一原版(UMich毕业证)密歇根大学|安娜堡分校毕业证成绩单
一比一原版(UMich毕业证)密歇根大学|安娜堡分校毕业证成绩单一比一原版(UMich毕业证)密歇根大学|安娜堡分校毕业证成绩单
一比一原版(UMich毕业证)密歇根大学|安娜堡分校毕业证成绩单
 
一比一原版(NYU毕业证)纽约大学毕业证成绩单
一比一原版(NYU毕业证)纽约大学毕业证成绩单一比一原版(NYU毕业证)纽约大学毕业证成绩单
一比一原版(NYU毕业证)纽约大学毕业证成绩单
 
Investigate & Recover / StarCompliance.io / Crypto_Crimes
Investigate & Recover / StarCompliance.io / Crypto_CrimesInvestigate & Recover / StarCompliance.io / Crypto_Crimes
Investigate & Recover / StarCompliance.io / Crypto_Crimes
 
Algorithmic optimizations for Dynamic Levelwise PageRank (from STICD) : SHORT...
Algorithmic optimizations for Dynamic Levelwise PageRank (from STICD) : SHORT...Algorithmic optimizations for Dynamic Levelwise PageRank (from STICD) : SHORT...
Algorithmic optimizations for Dynamic Levelwise PageRank (from STICD) : SHORT...
 
一比一原版(UVic毕业证)维多利亚大学毕业证成绩单
一比一原版(UVic毕业证)维多利亚大学毕业证成绩单一比一原版(UVic毕业证)维多利亚大学毕业证成绩单
一比一原版(UVic毕业证)维多利亚大学毕业证成绩单
 
Chatty Kathy - UNC Bootcamp Final Project Presentation - Final Version - 5.23...
Chatty Kathy - UNC Bootcamp Final Project Presentation - Final Version - 5.23...Chatty Kathy - UNC Bootcamp Final Project Presentation - Final Version - 5.23...
Chatty Kathy - UNC Bootcamp Final Project Presentation - Final Version - 5.23...
 
一比一原版(CBU毕业证)不列颠海角大学毕业证成绩单
一比一原版(CBU毕业证)不列颠海角大学毕业证成绩单一比一原版(CBU毕业证)不列颠海角大学毕业证成绩单
一比一原版(CBU毕业证)不列颠海角大学毕业证成绩单
 

Dealing with different Synapse Roles in Azure Synapse Analytics Erwin de Kreuk

  • 1. InSpark Erwin de Kreuk Dealing with different Roles in Azure Synapse Analytics
  • 2. InSpark We help organizations accelerating their digital transformation with impactful Microsoft solutions & expertise We Are InSpark
  • 3. InSpark Roles in Azure Synapse Analytics
  • 4. InSpark Access Control Azure Roles Synapse Roles SQL Roles Git Permissions Azure Synape
  • 5. InSpark Azure Synapse Studio Integration Management Monitoring Security Analytics runtimes Azure Data Lake Storage Azure Synapse Analytics Resource Group Development Resource Group Production Integration runtimes Integration runtimes Workspace Workspace Item Apache Spark Pool Integration Runtime Linked Services Credentials Data Engineers Data Scientists Azure Synapse Studio Integration Management Monitoring Security Analytics runtimes Azure Data Lake Storage Azure Synapse Analytics Integration runtimes Workspace Workspace Item Apache Spark Pool Integration Runtime Linked Services Credentials
  • 6. InSpark Azure Synapse Studio Integration Management Monitoring Security Analytics runtimes Azure Data Lake Storage Azure Synapse Analytics Resource Group Development Integration runtimes Workspace Workspace Item Apache Spark Pool Integration Runtime Linked Services Credentials
  • 7. InSpark Azure Synapse Analytics Resource Group Development Azure Owner or Contributor  Resource Group  Create Synapse Workspace  Manage Synapse Workspace  Synapse Resource  Manage Synapse Workspace Azure Contributor  Resource Group  ARM templates for automated deployment Resource Management Azure Roles
  • 8. InSpark Azure Synapse Analytics Resource Group Development Azure Storage Blob Data Contributor  User and workspace MSI Reader  Resource Group or Synapse Workspace Access Management Azure Roles Azure Data Lake Storage
  • 9. InSpark Synapse Administrator Administrators Synapse Apache Spark Administrator Synapse SQL Administrator Synapse Data Explorer Administrator???? Synapse Linked Data Manager Synapse Credential User Synapse Contributor Synapse Roles
  • 10. InSpark Azure Synapse Analytics Resource Group Development Roles:  Synapse Administrator  Synapse SQL Administrator  Synapse Apache Spark Administrator  SQL Active Directory Admin Administrators Synapse Roles Azure Data Lake Storage Analytics runtimes Integration runtimes
  • 11. InSpark Activities:  Can read and write artifacts  Can do all actions on Spark activities.  Can view Spark pool logs  Can view saved notebook and pipeline output  Can use the secrets stored by linked services or credentials  Can assign and revoke Synapse RBAC roles at current scope Synapse Administrator Synapse Roles
  • 12. InSpark Activities:  Can do all actions on Spark artifacts  Can do all actions on Spark activities Synapse Apache Spark Administrator Synapse Roles
  • 13. InSpark Activities:  Can do all actions on SQL scripts  Can connect to SQL serverless endpoints with SQL db_datareader, db_datawriter, connect, and grant permissions Synapse SQL Administrator Synapse Roles
  • 15. InSpark Roles:  Synapse Contributor  Synapse Artifact Publisher  Synapse Artifact User  Synapse Compute Operator  Synapse Credential User  Synapse Linked Data Manager  Synapse User Workspace Synapse Roles Integration runtimes Azure Synapse Studio Integration Management Monitoring Security Analytics runtimes Azure Data Lake Storage Azure Synapse Analytics Resource Group Development Integration runtimes Workspace
  • 18. InSpark Item:  Linked Service  Apache Spark Pool  Integration Runtime  Credentials Workspace Item Synapse Roles Azure Synapse Studio Integration Management Monitoring Security Analytics runtimes Azure Data Lake Storage Azure Synapse Analytics Resource Group Development Integration runtimes Workspace Workspace Item Apache Spark Pool Integration Runtime Linked Services Credentials
  • 19. InSpark  Role assignment on Workspace or Workspace Item  Needs to be Synapse Administrator  Can also be a guest user  No Synapse Administrator  Contributor or Owner on the Workspace  Advice! => create role assignments based on Security Groups  Changes in assignments will take up 2-5 minutes  Changes in SG can take 10-15 minutes Role Assignment Synapse Roles
  • 20. InSpark  No access message in Azure Portal  https://web.azuresynapse.net Tips and Tricks Synapse Roles
  • 21. InSpark  No access message in Azure Portal  https://web.azuresynapse  Power BI  Access is defined on Power BI workspace level Tips and Tricks Synapse Roles
  • 22. InSpark  No access message in Azure Portal  https://web.azuresynapse  Power BI  Access is defined on Power BI workspace level  Publish Error Tips and Tricks Synapse Roles
  • 23. InSpark Administrator Contributor Artifact Publisher Apache Spark Administrator SQL Administrator Artifact User Compute Operator Credential User Linked Data Manager User workspaces/read workspaces/roleAssignments/write, delete workspaces/managedPrivateEndpoint/write, delete workspaces/bigDataPools/useCompute/action workspaces/bigDataPools/viewLogs/action workspaces/integrationRuntimes/useCompute/action workspaces/integrationRuntimes/viewLogs/action workspaces/artifacts/read workspaces/notebooks/write, delete workspaces/sparkJobDefinitions/write, delete workspaces/sqlScripts/write, delete workspaces/kqlScripts/write, delete workspaces/dataFlows/write, delete workspaces/pipelines/write, delete workspaces/triggers/write, delete workspaces/datasets/write, delete workspaces/libraries/write, delete workspaces/linkedServices/write, delete workspaces/credentials/write, delete workspaces/notebooks/viewOutputs/action workspaces/pipelines/viewOutputs/action workspaces/linkedServices/useSecret/action workspaces/credentials/useSecret/action Role actions Synapse Roles
  • 26. InSpark Synapse Administrator:  db_owner (DBO) permissions on the ‘Built-In’ serverless SQL pool Synapse SQL Administrator:  Can do all actions on SQL scripts  Can connect to SQL serverless endpoints with SQL db_datareader, db_datawriter, connect, and grant permissions Serverless SQL Pool SQL Serverless
  • 27. InSpark Synapse Administrator:  Full access to data in dedicated SQL pools  Grant access to other users  Perform configuration and maintenance activities  Can't drop dedicated SQL pools Synapse SQL Administrator:  No access by default Active Directory Admin:  Full access Dedicated SQL Pool SQL Dedicated
  • 28. InSpark Serverless SQL pool: Dedicated SQL pool: SQL Pools SQL Dedicated Serverless use master go CREATE LOGIN [erwin.de.kreuk@demo.com] FROM EXTERNAL PROVIDER; go use yourdb -- Use your database name go CREATE USER demouser FROM LOGIN [erwin.de.kreuk@demo.com]; use yourdb -- Use your database name go alter role db_owner Add member demouser --Create user in the database CREATE USER [erwin.dekreuk@gmail.com] FROM EXTERNAL PROVIDER; --Grant role to the user in the database EXEC sp_addrolemember 'db_owner', 'erwin.dekreuk@gmail.com';
  • 30. InSpark Azure Dev Ops:  Basic user settings  Azure Artifact Publisher  Azure Contributor (Azure RBAC) or higher role on the Synapse workspace Dev Ops Service Connection:  Azure Contributor (Azure RBAC) or higher role on the Resource Group  Azure Synapse Administrator Azure Dev Ops GIT Integration
  • 31. InSpark Azure Synapse Studio Integration Management Monitoring Security Analytics runtimes Azure Data Lake Storage Azure Synapse Analytics Azure Synapse Studio Integration Management Monitoring Security Azure Data Lake Storage Azure Synapse Analytics Resource Group Development Resource Group Production Integration runtimes Analytics runtimes Integration runtimes Workspace Workspace Item Apache Spark Pool Integration Runtime Linked Services Credentials Workspace Item Apache Spark Pool Integration Runtime Linked Services Credentials Workspace Data Engineers Data Scientists
  • 32. InSpark Data Engineers  Needs to access SQL Serverless  Publish or edit Code  Debug pipelines Data Scientist:  Needs to access SQL Serverless  Needs access to a specified Spark Pool  Publish or edit Code  Submit Spark Jobs Security Groups Azure Synapse Studio Integration Management Monitoring Security Analytics runtimes Azure Data Lake Storage Azure Synapse Analytics Resource Group Development Integration runtimes Workspace Workspace Item Apache Spark Pool Integration Runtime Linked Services Credentials Data Engineers Data Scientists
  • 34. InSpark  Acces to Azure Synapse Studio  Create SQL Pools/Spark Pools /Data Explorer Pools  Execute Notebooks  View and edit code Artifacts  Debug or Trigger Pipelines  Monitor  Publish Code Recap Azure Synapse Azure Synapse Studio Integration Management Monitoring Security Analytics runtimes Azure Data Lake Storage Azure Synapse Analytics Resource Group Development Integration runtimes Workspace Workspace Item Apache Spark Pool Integration Runtime Linked Services Credentials Data Engineers Data Scientists