Restricting read access to Pipeline in ADF

Question

Hi Team,

I have many pieplines in my adf for different country data. My country team want to view their pipeline.

now i want to give them read permission for only their specific pipelines - which they can read ( linked service write not allowed, debug run not allowed) ..

Can we restrict there read scope only to one pipeline?
Please let me know how to do this.

Thanks & Regards,
Tharun

Answer 1

Hi @Shri Gowtham Tharun Reddy Abbireddy ,

Thank you for posting query in Microsoft Q&A Platform.

When built in roles are not available for our requirement then we can consider creating custom roles in Azure

In your case, you can consider creating custom roles, but still, it won't get you to control access at a specific pipeline level.

Pipelines as whole or triggers as whole or datasets as whole etc., we can grant related permissions in custom roles. But choosing a specific pipeline inside ADF and granting access or permissions only for it is not possible.

I would encourage you to submit feedback for this to allow choosing permission for specific pipeline level too inside a given ADF. Kindly use below link to submit feedback. Product team closly monitor feedbacks and consider them future implementations.
https://feedback.azure.com/d365community/forum/1219ec2d-6c26-ec11-b6e6-000d3a4f032c

Below gif shows steps to see all available permissions and actions for Azure Data factory while creating custom role. Kindly try the same and go through permissions and actions there and take call which one to consider in your custom role.
Please note, custom roles can be created at subscription level.

Hope this helps. Please let me know if any further queries.

-----------------------

• Please don't forget to click on or upvote button whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how
• Want a reminder to come back and check responses? Here is how to subscribe to a notification

Answer 2

Hi , as per my understanding you can create custom role for this:

https://datasharkx.wordpress.com/2021/07/26/security-access-to-trigger-a-specific-
pipeline-in-azure-data-factory/

https://stackoverflow.com/questions/59399491/is-there-a-way-to-set-different-permissions-to-pipelines-and-datasets-in-the-sam Thanks