Grant permissions so that the user can only modify their created pipeline

Question

Grant permissions so that the user can only modify their created pipeline

Gabriel Lazo 41

Hello,

I would like to know if there is any role or permission so that a certain user can only work in the pipeline that he created and cannot modify the other pipelines?
If the role or permission cannot be assigned directly from the data factory, could it be done with permissions in Azure DevOps?

Thanks for you help!

PRADEEPCHEEKATLA 90,736 Reputation points Moderator

2022-12-05T10:31:51.09+00:00

Hello @Gabriel Lazo ,

Just checking in to see if the below answer provided by @Nandan Hegde helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

1 answer

Your answer

PRADEEPCHEEKATLA 90,736 Reputation points Moderator

2022-12-05T10:31:51.09+00:00

Hello @Gabriel Lazo ,

Just checking in to see if the below answer provided by @Nandan Hegde helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

Answer 1

Nandan Hegde 36,241 MVP Volunteer Moderator

Hey,
For a user to publish changes to his pipeline, he would have to be given 'Microsoft.Resources/deployments/write' permission at the resource group level and it is not governed at a pipeline level.
So ideally I would recommend not to do this, any specific reason why you want to do this?

Gabriel Lazo 41 Reputation points

2022-11-29T03:50:10.063+00:00

The client asked us if there is any way that a user can only modify the pipeline that he created himself and not be able to modify the others or assign users to certain pipelines so that they can modify them.
Nandan Hegde 36,241 Reputation points MVP Volunteer Moderator

2022-11-29T04:39:03.413+00:00

Ideally I would say that it is not possible because at 1st point someone would have to create it manually for the 1st time meaning contributor access on ADF and then you might need to create custom roles etc compromising some security in the process.

++ @KranthiPakala-MSFT @PRADEEPCHEEKATLA : any suggestion in case if I am missing something
Gabriel Lazo 41 Reputation points

2022-11-29T04:41:40.873+00:00

Thanks for You answer!
Nandan Hegde 36,241 Reputation points MVP Volunteer Moderator

2022-11-29T04:44:32.42+00:00

For reference for custom role creation if there is a thought to proceed ahead:
https://datasharkx.wordpress.com/2021/07/26/security-access-to-trigger-a-specific-pipeline-in-azure-data-factory/

You can follow similar steps if need be but I recommend against it

Share via

Grant permissions so that the user can only modify their created pipeline

1 answer

Your answer