Does ADF have data isolation function?

Question

We are using ADF for data transmission, and we have installed IR on the local server to transfer data from the local database to Azure DB and perform some operations.

Our supplier has the operating authority of ADF. Due to the security policy, we do not want the supplier to upload data privately. Is there a permission configuration to prevent the supplier from uploading data?

Answer 1

Hi momonono:

Thanks for reaching out to Microsoft Q&A.

Do you mean the supplier has to be denied uploading data into azure sql database? for this either you can create a separate login for the user to use in his data factory pipeline and set that login with a restricted access inside the database.

(or)

You can try exploring the custom roles in adf. The below link is one example where the custom role was created to restrict users from creating/deleting the linked services, but you can modify to suit your requirement.

https://techcommunity.microsoft.com/t5/fasttrack-for-azure/custom-role-to-restrict-azure-data-factory-pipeline-developers/ba-p/3299161

and this one...

https://davidalzamendi.com/role-reader/

Please 'Upvote'(Thumbs-up) and 'Accept' as answer if the reply was helpful. This will be benefitting other community members who face the same issue.