Failed to load one or more resources due to no access, error code 403

Question

I have allowed public access to the synapse.

I also see the message "You do not have permission to review Synapse RBAC role assignments. Contact a Synapse Administrator for more information." in Azure Synpase Studio Access Control page even though I am the service administrator.

I also get the error message "Failed to create database. Login failed for user '

Answer 1

Hi @abibby

Welcome to Microsoft Q&A forum and thanks for reaching out here.

As per the access control screenshot you have shared, seems like you are looking at the Azure RBAC of Synapse resource in Azure Portal.

Please note that Azure RBAC is different from Synapse RBAC. An Azure RBAC is used to manage who can create, update, or delete the Synapse workspace where as Synapse RBAC is used to manage who can:

• Publish code artifacts and list or access published code artifacts,
• Execute code on Apache Spark pools and Integration runtimes,
• Access linked (data) services protected by credentials.
• Monitor or cancel job execution, review job output, and execution logs.

Like Azure RBAC, Synapse RBAC works by creating role assignments. Synapse RBAC is managed from within Synapse Studio (Note: Not Azure Portal, this is different) using the access control tools in the Manage hub.

Please note that only Synapse Administrators can assign Synapse RBAC roles. A Synapse Administrator at the workspace level can grant access at any scope. A Synapse Administrator at a lower-level scope can only grant access at that scope.

When a new workspace is created, the creator is automatically given the Synapse Administrator role at workspace scope.

For better understanding of Synapse RABC and how it works, please refer to this doc: What is Synapse role-based access control (RBAC)?

To review and validate what are the Synapse RBAC role assignments assigned to you, please follow this document which has steps to follow in Synapse Studio (Note: Not in Azure Portal): How to review Synapse RBAC role assignments

I have noticed from your screenshot that Azure RBAC access control permissions are given at Synapse resource level in Azure portal and not at the resource group level. Which is why you are seeing this issue.

For more info please refer to this doc: Built-in Synapse RBAC roles and scopes

Here is a document which will help you understand which Synapse RBAC (role-based access control) roles or Azure RBAC roles you need to get work done in Synapse Studio - Understand the roles required to perform common tasks in Azure Synapse

Hope this information helps. If you have further questions, please elaborate on what exactly you are trying to accomplish, and we would be happy to assist you accordingly.

---

Please don’t forget to Accept Answer and Yes for "Was this answer helpful" wherever the information provided helps you, this can be beneficial to other community members.

Answer 2

A bit late to this party but recently encountered the same error message. You may need to create a (Security) group and assign Azure role assignments role such as Owner and Storage Blob Data Contributor. Once this is created and you can add the (Synapse) user to this group. Also, within Synapse studio->Manage->Access control->Add role assignment that created above. Finally, you may need logout, close the browser and login again. Please note even if you have Owner role for subscription/resource group but not having necessary access within Synapse studio, you will get this error message. Good luck