Hi @JayZee64
Thanks for the question and using MS Q&A platform.
To create a role in Synapse that allows users to have admin access but blocks access to particular pipelines and linked services, you can use Azure RBAC (Role-Based Access Control) to define a custom role with the necessary permissions.
- Open the Azure Synapse Analytics workspace in the Azure portal.
So, here’s what I did, but at the Subscription level:
- Click on the relevant Subscription.
- Click on Access Control (IAM)
- Click Add -> Add Custom Role
- Give the custom role a name (e.g. "Restricted Admin") and a description.
- Under "Permissions", select the "Microsoft.Synapse/workspaces/" resource provider and grant the "Microsoft.Authorization//read" permission. This will allow users with this role to view the Synapse workspace and its resources.
- Under "Permissions", select the "Microsoft.Synapse/workspaces/linkedServices/" resource provider and grant the "Microsoft.Authorization//read" permission. This will allow users with this role to view the linked services in the Synapse workspace.
- Under "NotActions", select the "Microsoft.Synapse/workspaces/pipelines/" resource provider and deny the "Microsoft.Authorization//read" permission. This will block users with this role from viewing the pipelines in the Synapse workspace.
- Under "NotActions", select the "Microsoft.Synapse/workspaces/linkedServices/" resource provider and deny the "Microsoft.Authorization//read" permission. This will block users with this role from viewing the linked services in the Synapse workspace.
- Click "Review + create" to create the custom role.
- Assign the custom role to the users who need admin access but should be blocked from viewing the pipelines and linked services related to the new data source.
Refer this article for more information: https://learn.microsoft.com/en-us/azure/synapse-analytics/security/synapse-workspace-synapse-rbac-roles
Hope this helps. Do let us know if you any further queries.
If this answers your query, do click Accept Answer
and Yes
for was this answer helpful. And, if you have any further query do let us know.