Unable to change TLS version on Event Hub related to Azure Purview account

Question

I have a event hub that is related to Azure Purview account. I can't change the TLS version on it because there is a deny rbac permission set on it which denies access to all other accounts except the Azure Purview app itself. From what I am reading, it seems that for Microsoft Purview accounts that were created before December 15th, 2022, the Event Hub is a managed resource and is provisioned during the Microsoft Purview account provisioning. Is there anyway to modify the permissions on it to allow me to change the TLS version.

Or, do I need to disable this event hub and configure my own event Hub? If so then how bets to set it up?

Answer 1

@curious7
Thank you for the question and for using Microsoft Q&A platform.

Here are some steps you can take to troubleshoot and potentially resolve this issue:

1. To modify the permissions on the existing Event Hub, you would need to have the necessary RBAC roles that allow you to manage Event Hubs namespaces. Roles such as Microsoft.EventHub/namespaces/write or Microsoft.EventHub/namespaces/* would be required. If you don’t have these permissions, you might need to work with your Azure administrator to get the necessary access.
   https://learn.microsoft.com/en-us/azure/event-hubs/transport-layer-security-enforce-minimum-version
2. If modifying the permissions isn’t feasible, you can disable the existing Event Hub and set up a new one. Here’s a brief guide on how to do it: Create a New Event Hub Namespace: Go to the Azure portal, navigate to “Event Hubs,” and create a new namespace. Set Minimum TLS Version: During the creation process, you can specify the minimum TLS version on the “Advanced” tab. Configure Your Event Hub: Once the namespace is created, you can add an Event Hub to it and configure it as needed. https://learn.microsoft.com/en-us/azure/event-hubs/transport-layer-security-configure-minimum-version

Hope this helps. Please let us know if you have any further questions.