Purview MSI

Sem, Gunnar Windsand 1 Reputation point
2021-01-19T10:08:39.11+00:00

!58075-azure.png

Hi, as you can se from the picture attached I'm struggling to get my Purview MSI to have access to the SQL database.
Could you help me with a simple stepwise progress to manage this? :)

Regards,
Gunnar Windsand Sem

Microsoft Purview
Microsoft Purview
A Microsoft data governance service that helps manage and govern on-premises, multicloud, and software-as-a-service data. Previously known as Azure Purview.
969 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,905 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. PRADEEPCHEEKATLA-MSFT 80,251 Reputation points Microsoft Employee
    2021-01-19T12:23:41.48+00:00

    Hello @Sem, Gunnar Windsand ,

    Welcome to the Microsoft Q&A platform.

    While creating and running a scan, initially I had faced the same problem.

    58107-image.png

    After going through the document, I had found this information which helped to resolve the issue.

    If you are using managed identity, your Purview account has its own managed identity which is basically your Purview name when you created it. You must create an Azure AD user in Azure SQL Database with the exact Purview's managed identity or your own service principal by the following tutorial on Create the service principal user in Azure SQL Database. You need to assign proper permission (e.g. db_owner or db_datareader) to the identity.

    Example SQL syntax to create user and grant permission:

    CREATE USER [Username] FROM EXTERNAL PROVIDER  
    GO  
      
    EXEC sp_addrolemember 'db_owner', [Username]  
    GO  
    

    Note: The Username is your own service principal or Purview's managed identity. You can read more about fixed-database roles and their capabilities.

    Steps to resolve the issue:

    Step1: Connect to Azure SQL Database using SSMS using Active Directory option.

    58066-image.png

    Step2: Select the database and run the below command.

    58067-image.png

    Step3: Go back to Azure Purview portal and test connection

    58000-image.png

    Hope this helps. Do let us know if you any further queries.

    ------------

    • Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.
    • Want a reminder to come back and check responses? Here is how to subscribe to a notification.