When a service principal creates a workspace via ARM Deployment, who is the Synapse Administrator?

Question

Documentation says that the creator of a synapse workspace is made the administrator of the workspace. I have a continuous deployment system that creates a Synapse workspace, but the principal gets 403 for New-AzSynapseRoleAssignment.

I can't find any other documentation on the required permissions for Microsoft.Synapse/workspaces/roleAssignments.

Answer 1

Hello @Nina Reynolds ,

Welcome to the Microsoft Q&A platform.

Make sure Azure DevOps pipeline’s service principal has been granted the permission of subscription and also assigned as workspace admin for target workspace.

For more details, you can checkout the below links which describes on continuous integration and delivery for Azure Synapse workspace.

• https://learn.microsoft.com/en-us/azure/synapse-analytics/cicd/continuous-integration-deployment
• https://techcommunity.microsoft.com/t5/data-architecture-blog/ci-cd-in-azure-synapse-analytics-part-1/ba-p/1964172
• https://techcommunity.microsoft.com/t5/data-architecture-blog/ci-cd-in-azure-synapse-analytics-part-2/ba-p/1991060
• https://techcommunity.microsoft.com/t5/data-architecture-blog/ci-cd-in-azure-synapse-analytics-part-3/ba-p/1993201
• https://techcommunity.microsoft.com/t5/data-architecture-blog/ci-cd-in-azure-synapse-analytics-part-4-the-release-pipeline/ba-p/2034434

Hope this helps. Do let us know if you any further queries.

------------

• Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.
• Want a reminder to come back and check responses? Here is how to subscribe to a notification.