Azure synapse Write access to spark pool not working

Question

Hi,

I am trying to install a package from azure devops to a synapse spark pool. I am getting an error for my managed identity that it does not have authorization to perform action 'Microsoft.Synapse/workspaces/bigDataPools/write'.
The managed identity has 'Azure Service Deploy Release Management Contributor' role assigned in azure portal.

It also has the following role assignments in synapse studio-
Synapse Compute Operator, Synapse Administrator, Synapse Apache Spark Administrator, Synapse Artifact Publisher.

Why am I still getting the unauthorized error?

Answer 1

Hello @Chavi Gupta !

I can see that the issue is in Authorization

All the RBAC roles described here

https://learn.microsoft.com/en-us/azure/synapse-analytics/security/synapse-workspace-synapse-rbac-roles

DO not contain the 'Microsoft.Synapse/workspaces/bigDataPools/write role

My suggestion:

Create a new Custom Role and add this Permissions

Select start from scratch , ADD Permissions and find :

Assign the role to the Identity and retry !

--

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards

Answer 2

Hello @Chavi Gupta !

I suppose this is what you did right ?

Kindly let us know !

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards