Self-Hosted integration runtime keys

Nagesh CL 686

Hi Team,

I am unable to view the Self-hosted integration runtime keys.

What RBAC roles are required in order to view the keys?

PFB the screenshot: -

IR-Errors

Thanks,

Nagesh CL

1 answer

Bhargava-MSFT 31,191 Reputation points Microsoft Employee

2023-07-10T18:55:02.61+00:00

@Nagesh CL

It looks like you have only reader role access on the Synapse workspace. Due to this reason, you are unable to view the SHIR keys.

A reader role should only allow the assignee to read information on the resource it applies to.

The reason is, If we displayed the SHIR keys to a Reader, we'd be giving them the right to write to the resource by deploying a SHIR app and hooking it into synapse with that SHIR key.

To view the Self-hosted integration runtime keys in Azure Synapse Analytics, you need to have the "Synapse Administrator" or "Synapse Contributor" role assigned to your user account on the workspace level.

The "Synapse Administrator" role provides complete access to all Synapse resources, while the "Synapse Contributor" role provides access to create and manage Synapse resources but not to manage access to those resources.

I hope this helps. Please let me know if you have any further questions.

If this answers your question, please consider accepting the answer by hitting the Accept answer and up-vote as it helps the community look for answers to similar questions.
Please sign in to rate this answer.
Nagesh CL 686 Reputation points

2023-07-11T05:11:44.2566667+00:00

Thanks @Bhargava-MSFT for your response.

Unfortunately, client does not give Admin or Contributor privileges. They have created a custom role and can the required RBAC roles to it. Is there a particular RBAC role with which this access can be provisioned?

Regards,

Nagesh CL

Bhargava-MSFT 31,191 Reputation points Microsoft Employee

2023-07-11T17:41:40.56+00:00

Hi @Nagesh CL,

Thanks for the additional details. In this case, you can work with your client to create a custom role to see the Integration run time keys.

Role name: Microsoft.Synapse/workspaces/integrationRuntimes/listAuthKeys/action

Description: List Auth Keys of any Integration Runtime

Reference document: https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles-portal

I hope this helps.

If this answers your question, please consider accepting the answer by hitting the Accept answer and up-vote as it helps the community look for answers to similar questions.

Bhargava-MSFT 31,191 Reputation points Microsoft Employee

2023-07-12T16:09:21.3533333+00:00

Hi @Nagesh CL,

I am checking to see if you got a chance to look into my above response.

If this answers your question, please consider accepting the answer by hitting the Accept answer and up-vote as it helps the community look for answers to similar questions.

Bhargava-MSFT 31,191 Reputation points Microsoft Employee

2023-07-13T17:17:05.3566667+00:00

Hi @Nagesh CL,

I am checking to see if you got a chance to look into my above response.

If this answers your question, please consider accepting the answer by hitting the Accept answer and up-vote as it helps the community look for answers to similar questions.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Self-Hosted integration runtime keys

1 answer

Your answer