Microsoft Purview Roles Not Appearing

Question

Microsoft purview is registered in our subscription under primary azure subscription. However, the required RBAC roles such as:

• Purview Data Source Administrator
• Purview Curator

are not showing in:

az role definition list

Azure Portal > IAM > Add Role Assignment

Even after running:

bash
Copy
az provider register --namespace Microsoft.Purview
az role definition list --custom-role-only false

They still return []. Please guide what can be done for this issue and why is it so?

Answer 1

@Pragati Shinde It sounds like you're having trouble seeing the RBAC roles for Microsoft Purview, specifically the Purview Data Source Administrator and Purview Curator roles, even after running the registration and query commands.

Here are a few things to check:

Registration Status: Ensure that the Microsoft Purview resource is fully registered. Sometimes, it can take a little bit of time for Azure services to reflect changes. You can verify the registration status by running the command:

az provider show --namespace Microsoft.Purview

Check the "registrationState" property; it should show as Registered.

Correct Subscription: Confirm that you are operating under the correct subscription where Microsoft Purview is registered. You can switch the context to the correct subscription using:

az account set --subscription "Your Subscription ID or Name"

Permissions: Make sure that your account has the necessary permissions to view roles. You might need to be a Global Administrator or have the Role Management role to see certain RBAC roles.

Role List Command: When you're running the role list command, ensure that you're not filtering out the built-in roles by using the flag --custom-role-only. The command should look like this:

az role definition list --custom-role-only false

Sometimes roles may be updated or changed by Microsoft. It can be helpful to check the Microsoft Purview permissions documentation for any updates regarding available roles.

If you've checked all of these and still can’t see the roles, here are a few follow-up questions that could help narrow down the issue:

1. Can you confirm if the Purview resource is fully deployed and operational?
2. Are you accessing this from an Azure account that has sufficient permissions?
3. Have you tried accessing this functionality from a different Azure Portal session or account?

Answer 2

hi@phemanth ,The registration state is registered. I ran the command az role definition list --custom-role-only false and it is not showing the the roles mentioned. Purview resource is fully deployed but operationhas started just few weeks ago. Yes I tried accessing this functionality from a different Azure Portal session.