What are the permissions I need to create a Microsoft Purview account under an organization's Azure subscription?

Question

What are the permissions I need to create a Microsoft Purview account under an organization's Azure subscription?

Nguyen Chinh Dat - TT DLPT 30

What are the permission I need to create a Microsoft Purview account under an organization's Azure subscription? I can only ask for a certain limited amount of permissions from my organization's subscription manager.

Dr. S. Gomathi 710 Reputation points MVP

2023-08-11T09:34:00.54+00:00
Hi Nguyen,

To create a Microsoft Purview account under an organization subscription, you will need at least a reader role on a collection in your Microsoft Purview Data Map.

Alternatively, you can access the Microsoft Purview governance portal through the Azure portal by searching for your Microsoft Purview account, opening it, and selecting "Open Microsoft Purview governance portal", for which you will need at least a Reader role under Access Control (IAM).

In addition, the specific permissions required for managing a Microsoft Purview account vary depending on the role you need to perform within the account. Here are some of the predefined roles:

Collection administrator

Data curators

Data readers

Data source administrator

Insights reader

Policy author (Preview)

Workflow administrator Please note that these are just some of the predefined roles mentioned in the link here https://learn.microsoft.com/en-us/purview/microsoft-365-compliance-center-permissions. Your organization's subscription manager can provide you with a limited set of permissions based on your specific requirements.

For more detailed information and instructions regarding permissions and access control in Microsoft Purview, I recommend reviewing the full article on catalog permissions available at the following link: https://learn.microsoft.com/en-us/purview/microsoft-365-compliance-center-permissions

If you find this answer helpful, a thumbs up would be greatly appreciated!\

Regards,

Dr. Gomathi S
Nguyen Chinh Dat - TT DLPT 30 Reputation points

2023-08-11T09:51:31.7633333+00:00

Appreciated Dr.Gomathi S. I already had the reader role under Access control (IAM) but I cant create a Purview Account. I need to ask for some limited amount of permissions to create one. These are the permissions that I have to choose from https://learn.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftpurview. Can you take a look and specify which permissions in those I will need. Thank you so much!
Nguyen Chinh Dat - TT DLPT 30 Reputation points

2023-08-13T09:59:49.4+00:00

Thank you so much for your help!
QuantumCache 20,366 Reputation points Moderator

2023-08-17T16:05:39.3733333+00:00

Hello @Nguyen Chinh Dat - TT DLPT Could you please confirm we can close this case discussion?
Nguyen Chinh Dat - TT DLPT 30 Reputation points

2023-08-19T02:47:39.96+00:00

Yes we can closr this discussion. Thank you so much!

1 answer

Your answer

Dr. S. Gomathi 710 Reputation points MVP

2023-08-11T09:34:00.54+00:00

Hi Nguyen,

To create a Microsoft Purview account under an organization subscription, you will need at least a reader role on a collection in your Microsoft Purview Data Map.

Alternatively, you can access the Microsoft Purview governance portal through the Azure portal by searching for your Microsoft Purview account, opening it, and selecting "Open Microsoft Purview governance portal", for which you will need at least a Reader role under Access Control (IAM).

In addition, the specific permissions required for managing a Microsoft Purview account vary depending on the role you need to perform within the account. Here are some of the predefined roles:

Collection administrator

Data curators

Data readers

Data source administrator

Insights reader

Policy author (Preview)

Workflow administrator Please note that these are just some of the predefined roles mentioned in the link here https://learn.microsoft.com/en-us/purview/microsoft-365-compliance-center-permissions. Your organization's subscription manager can provide you with a limited set of permissions based on your specific requirements.

For more detailed information and instructions regarding permissions and access control in Microsoft Purview, I recommend reviewing the full article on catalog permissions available at the following link: https://learn.microsoft.com/en-us/purview/microsoft-365-compliance-center-permissions

If you find this answer helpful, a thumbs up would be greatly appreciated!\

Regards,

Dr. Gomathi S
Nguyen Chinh Dat - TT DLPT 30 Reputation points

2023-08-11T09:51:31.7633333+00:00

Appreciated Dr.Gomathi S. I already had the reader role under Access control (IAM) but I cant create a Purview Account. I need to ask for some limited amount of permissions to create one. These are the permissions that I have to choose from https://learn.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftpurview. Can you take a look and specify which permissions in those I will need. Thank you so much!
Nguyen Chinh Dat - TT DLPT 30 Reputation points

2023-08-13T09:59:49.4+00:00

Thank you so much for your help!
QuantumCache 20,366 Reputation points Moderator

2023-08-17T16:05:39.3733333+00:00

Hello @Nguyen Chinh Dat - TT DLPT Could you please confirm we can close this case discussion?
Nguyen Chinh Dat - TT DLPT 30 Reputation points

2023-08-19T02:47:39.96+00:00

Yes we can closr this discussion. Thank you so much!

Answer 1

Dr. S. Gomathi 710 MVP

Great Nguyen,

I realize that, despite having the Reader role, you are unable to create a Microsoft Purview account. I can assist you in extracting the permissions you require from the shared list.

Microsoft.Purview/accounts/write is the most essential permission you need. This permission enables the creation of a new Purview account. If you do not possess this permission, you will be unable to establish a new account regardless of any other permissions you may possess.

Other potential beneficial permissions include:

Action for Microsoft.Purview/accounts/assign/action This permission enables you to assign roles to Purview account users.

Microsoft.Purview/accounts/regenerateKey/action This permission permits the regeneration of an account's access credentials.

Microsoft.Purview/accounts/start/action and Microsoft.Purview/accounts/stop/action allows you to initiate or terminate a Purview account.

Microsoft.Purview/accounts/delete: This permission permits the deletion of a Purview account.

Microsoft.Purview/accounts/write key/operation: This permission enables you to save a Purview account's access keys to a file.

Microsoft.Purview/accounts/read: This permission enables you to read the account information for a Microsoft Purview account.

You can inquire with your subscription manager about the precise permissions you require. You are not required to request every item on the list.

I hope this is useful!

Regards,

Dr. Gomathi S

Nguyen Chinh Dat - TT DLPT 30 Reputation points

2023-08-19T02:49:56.0133333+00:00

This answer is credited to Dr. S. Gomathi:

Microsoft.Purview/accounts/write is the most essential permission you need. This permission enables the creation of a new Purview account. If you do not possess this permission, you will be unable to establish a new account regardless of any other permissions you may possess.

Other potential beneficial permissions include:

Action for Microsoft.Purview/accounts/assign/action This permission enables you to assign roles to Purview account users.

Microsoft.Purview/accounts/regenerateKey/action This permission permits the regeneration of an account's access credentials.

Microsoft.Purview/accounts/start/action and Microsoft.Purview/accounts/stop/action allows you to initiate or terminate a Purview account.

Microsoft.Purview/accounts/delete: This permission permits the deletion of a Purview account.

Microsoft.Purview/accounts/write key/operation: This permission enables you to save a Purview account's access keys to a file.

Microsoft.Purview/accounts/read: This permission enables you to read the account information for a Microsoft Purview account.
QuantumCache 20,366 Reputation points Moderator

2023-08-19T22:27:52.59+00:00

Hello @Nguyen Chinh Dat - TT DLPT Please click "Accept Answer" . So that we can close this thread.

Share via

What are the permissions I need to create a Microsoft Purview account under an organization's Azure subscription?

1 answer

Your answer