We dynamically create Azure users and generate a database for each user in our Azure Data Explorer cluster. There is a security feature in Data Explorer that asks the user whether they want to trust the connection to the database (see attached screenshot). I want my generated user to automatically trust the connection to the database I created so that they wouldn't see this pop-up. Is that possible? I couldn't find any documentation about it. If it is not possible to automate trusting the connection, then are there any workarounds I could use?

Hello @42726446, welcome to this moderated Azure community forum. It mentions some connection list. Are you sure this is not some company/network/firewall/browser related feature? Which tool is giving this message? Is it the web interface towards the Database explorer/query editor? Please provide information about the steps you have taken, the guide you follow, and the errors you receive. Which security feature are you describing? If the response helped, do "Accept Answer". If it doesn't work, please let us know the progress. All community members with similar issues will benefit by doing so. Your contribution is highly appreciated.

Is it possible to automate trusting an Azure Data Explorer database connection?

Accepted answer

Sander van de Velde | MVP 33,556 Reputation points MVP

2024-05-02T17:05:33.8833333+00:00

Hello @42726446,

welcome to this moderated Azure community forum.

It mentions some connection list.

Are you sure this is not some company/network/firewall/browser related feature?

Which tool is giving this message? Is it the web interface towards the Database explorer/query editor?

Please provide information about the steps you have taken, the guide you follow, and the errors you receive. Which security feature are you describing?

If the response helped, do "Accept Answer". If it doesn't work, please let us know the progress. All community members with similar issues will benefit by doing so. Your contribution is highly appreciated.
Please sign in to rate this answer.

1 person found this answer helpful.
42726446 75 Reputation points

2024-05-03T08:02:01.2733333+00:00

Hello, thank you for taking the time to help with this issue.

Are you sure this is not some company/network/firewall/browser related feature?

This pop-up is unrelated to any company/network/firewall/browser-related feature.

I have reproduced the behavior on the following browsers:

Firefox

Chrome

Which tool is giving this message? Is it the web interface towards the Database explorer/query editor?

Yes, it is the Data Explorer web interface. See screenshot showing pop-up:

Please provide information about the steps you have taken, the guide you follow, and the errors you receive.

Steps to reproduce:

As an admin in Azure, set up a Data Explorer database and user account

Create a cluster in Data Explorer

Create a new Azure Active Directory user

Grant the user permission to read the cluser

Create a new database in the cluster

Open a new incognito tab in your browser

In the incognito tab, open the Data Explorer database via URL (replace the bash variables with the cluster, region and database names): https://dataexplorer.azure.com/clusters/$CLUSTER_NAME.$REGION/databases/$DATABASE_NAME

Log in to the user created in step 1

Click either "Yes" or "No" on the "Stay signed in?" pop-up

The connection list-related pop-up will now be visible. If you click on "Cancel" instead of "Trust", then the database will not show up in Data Explorer

I did not receive any errors. This seems to be expected behavior. The problem is that when my users choose to click on "Cancel", then the database will not show up for them and it breaks their user experience. Since the user account in step 1b was created expressly for them to access the database created in 1d, then it does not make sense to ask them whether they wish to trust the connection. I would like to automate things so that the connection to the database is trusted for their user account.

Which security feature are you describing?

I am describing the pop-up from step 6 which can be seen in the screenshot.

Sander van de Velde | MVP 33,556 Reputation points MVP

2024-05-03T22:26:52.01+00:00

Hello @42726446,

thank you for the very elaborate explanation.

I just tried this myself and I get the same messsage:

This is new to me too.

It seems part of the new make-over of the web ui.

The documentation does not provide extra information and I see no portal settings related to this.

My best guess this is standard behavior and not manageable.

Off topic: have you tried creating multiple databases (one for every user) inside the same cluster? This means only one cluster is paid for and the ingest and query compute is shared over all users.

42726446 75 Reputation points

2024-05-08T08:05:41.4166667+00:00

@Sander van de Velde | MVP Thank you for the reply. It's a bit disappointing that this isn't manageable.

have you tried creating multiple databases (one for every user) inside the same cluster?

Yes, this is how I currently do it since the clusters are very expensive and take an extremely long time to come online after being created.

Sander van de Velde | MVP 33,556 Reputation points MVP

2024-05-08T11:00:13.6266667+00:00

Hello @42726446,

I understand the reaction, it feels like an error instead of a notification.

If there is a feedback option on the page, let users give a reaction.

Microsoft is reading these reactions to learn about the user experience.

Regarding creating the database, this is how I should do it too :-)
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Is it possible to automate trusting an Azure Data Explorer database connection?

0 additional answers

Your answer