Azure Data Factory - cannot access share folder

Question

Hi, I want to set up a monitoring job on ADF using Scope, but the job failed with error saying no access to the share folder shares/searchDM/distrib, my job highly relies on this folder because I need to use the SLAPI view and data, could someone help take a look and let me know how to get the access?

https://aad.cosmos09.osdinfra.net/cosmos/shopping.prod/shares/searchDM/distrib/released/SLAPI/SearchLogPageView.view?property=info

Answer 1

Hi @June Zhu ,

Welcome to Microsoft Q&A forum and thanks for reaching out.

It seems to be an ACL permission issue at the child folder level (distrib).

If you are using Service Principal authentication then please grant the service principal proper permission. See examples on how permission works in Data Lake Storage Gen2 from Access control lists on files and directories

• As source: In Storage Explorer, grant at least Execute permission for ALL upstream folders and the file system, along with Read permission for the files to copy. Alternatively, in Access control (IAM), grant at least the Storage Blob Data Reader role.
• As sink: In Storage Explorer, grant at least Execute permission for ALL upstream folders and the file system, along with Write permission for the sink folder. Alternatively, in Access control (IAM), grant at least the Storage Blob Data Contributor role.

Note: If you use Data Factory UI to author and the service principal is not set with "Storage Blob Data Reader/Contributor" role in IAM, when doing test connection or browsing/navigating folders, choose "Test connection to file path" or "Browse from specified path", and specify a path with Read + Execute permission to continue.

If you are using Managed Identity authentication, then please grant the managed identity proper permission. See examples on how permission works in Data Lake Storage Gen2 from Access control lists on files and directories.

• As source: In Storage Explorer, grant at least Execute permission for ALL upstream folders and the file system, along with Read permission for the files to copy. Alternatively, in Access control (IAM), grant at least the Storage Blob Data Reader role.
• As sink: In Storage Explorer, grant at least Execute permission for ALL upstream folders and the file system, along with Write permission for the sink folder. Alternatively, in Access control (IAM), grant at least the Storage Blob Data Contributor role.

Note: If you use Data Factory UI to author and the managed identity is not set with "Storage Blob Data Reader/Contributor" role in IAM, when doing test connection or browsing/navigating folders, choose "Test connection to file path" or "Browse from specified path", and specify a path with Read + Execute permission to continue.

Hope this info helps. Do let us know how it goes.

----------

Please don’t forget to Accept Answer and Up-Vote wherever the information provided helps you, this can be beneficial to other community members.