Unable to Copy Data from Private Endpoint Blob Storage to SQL MI Using ADF

Question

How can I resolve the issue of being unable to copy data from a private endpoint blob storage to SQL Managed Instance (SQL MI) using Azure Data Factory (ADF) due to a "403 Forbidden" error?

PS - Based on common issues that we have seen from customers and other sources, we are posting these questions to help the Azure community.

Answer 1

The "403 Forbidden" error indicates that the request to the blob storage is being denied, likely due to insufficient permissions. To resolve this issue, you need to use the System Assigned Managed Identity (MI) for Azure Data Factory and assign the Storage Blob Data Contributor role to the MI. This role assignment grants the necessary permissions for the ADF to access and copy data from the blob storage.

To implement this solution:

1. Enable Managed Identity for ADF: Ensure that the Managed Identity feature is enabled for your Azure Data Factory.
2. Assign Role to Managed Identity:
   • Navigate to your blob storage account in the Azure portal.
     • Go to the "Access Control (IAM)" section.
       • Click "Add" and select "Add role assignment."
         • Assign the "Storage Blob Data Contributor" role to the Managed Identity of your Azure Data Factory.

For further details and step-by-step instructions, you can refer to the following Azure documentation links:

Resources:

• Assign Azure roles using the Azure portal
• Managed Identity for Data Factory

Hope this helps. If you have any follow-up questions, please let me know. I would be happy to help.

Please do not forget to "Accept the answer" and "up-vote" wherever the information provided helps you, as this can be beneficial to other community members.