Synapse Studio - 403 Unauthorised - Even with Owner permissions

Question

Synapse Studio - 403 Unauthorised - Even with Owner permissions

Alex Driver 1

I am having trouble access Synapse Studio for a workspace that I have "Owner" permissions to.

AnnuKumari-MSFT 21,316 Reputation points Microsoft Employee

2022-02-22T18:39:57.297+00:00

Hi @Alex Driver ,
Just following up to see if the answer helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.
AnnuKumari-MSFT 21,316 Reputation points Microsoft Employee

2022-02-28T14:09:09.12+00:00

Hi @Alex Driver ,
Just checking in to see if the answer helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

AnnuKumari-MSFT 21,316 Reputation points Microsoft Employee

2022-02-22T18:39:57.297+00:00

Hi @Alex Driver ,
Just following up to see if the answer helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.
AnnuKumari-MSFT 21,316 Reputation points Microsoft Employee

2022-02-28T14:09:09.12+00:00

Hi @Alex Driver ,
Just checking in to see if the answer helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

Answer 1

Vaibhav Chaudhari 37,886

Check if you can grant yourself Synapse Admin or Synapse Contributor role under Synapse Studio > Access Control tab.

For reference:
https://learn.microsoft.com/en-us/azure/synapse-analytics/security/synapse-workspace-understand-what-role-you-need#tasks-and-required-roles
https://learn.microsoft.com/en-us/azure/synapse-analytics/security/synapse-workspace-synapse-rbac-roles

AnnuKumari-MSFT 21,316 Reputation points Microsoft Employee

2022-02-15T10:33:23.253+00:00

Hi @Alex Driver ,
Just checking in to see if the above solution provided by @Vaibhav Chaudhari helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.
Alex Driver 1 Reputation point

2022-02-15T10:40:49.2+00:00

Hi @Vaibhav Chaudhari

When I try to search for my user account on the Access Control tab, I get "Failed to find resource".
On the network tab, I can see 403 responses:

It might be worth noting, that I am a Guest account on the Tenant with "Owner" permissions.
Vaibhav Chaudhari 37,886 Reputation points

2022-02-16T06:16:32.883+00:00

Is there anyone who belong to the same Tenant (not a guest user) and who is owner of the Synapse workspace? Probably that user should be able to add your guest user id and grant synapse admin permission
Vaibhav Chaudhari 37,886 Reputation points

2022-02-16T06:18:11.647+00:00

I see this note in given in documentation "A guest users (users from a different AD tenant) can also see and manage role assignment after being assigned the Synapse Administrator role."

https://learn.microsoft.com/en-us/azure/synapse-analytics/security/how-to-review-synapse-rbac-role-assignments

Answer 2

Hamish MacDonald 1

@Vaibhav Chaudhari was anything further discovered around this issue? I have same issue.

guest user in tenancy
owner of subscription
created synapse analytics workspace
get a 403 when try to add another user as admin.

WZIAFP 157 Reputation points

2022-07-28T10:57:04.817+00:00

Have you got any firewall settings applied on your workspace? I had to whitelist mine to gain access

Answer 3

Gaurav Batta 1

I am having same exact problem, I am owner of Synapse Analytics and owner of the subscription.

WZIAFP 157 Reputation points

2022-07-28T15:14:03.693+00:00

Have you checked your Synapse Firewall settings in the portal?
I had to whitelist my IP address to gain access. Also need Storage Blob Contributor role applied to my account

Answer 4

I was able to get the issue resolved by following what @Vaibhav Chaudhari suggested. That is under Synapse Studio > Access Control, I had to explicitly add Synapse Administrator privilege for my AD account's object id as well as the object id of service principal which was used by Terraform to spin up this infrastructure. When I was creating Synapse Workspace through Powershell or Azure Portal I did not had this problem. The problem was only coming when using Terraform to create azure synapse workspace. Using Terraform somehow was missing to provide Synapse Administrator role in Access Control to my account.

Thanks!

Synapse Studio - 403 Unauthorised - Even with Owner permissions

4 answers

Activity