Synapse Studio - 403 Unauthorised - Even with Owner permissions

Alex Driver 1

I am having trouble access Synapse Studio for a workspace that I have "Owner" permissions to.

AnnuKumari-MSFT 31,151 Reputation points Microsoft Employee

2022-02-22T18:39:57.297+00:00

Hi @Alex Driver ,
Just following up to see if the answer helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.
AnnuKumari-MSFT 31,151 Reputation points Microsoft Employee

2022-02-28T14:09:09.12+00:00

Hi @Alex Driver ,
Just checking in to see if the answer helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

4 answers

Vaibhav Chaudhari 38,621 Reputation points

2022-02-12T10:20:48.627+00:00

Check if you can grant yourself Synapse Admin or Synapse Contributor role under Synapse Studio > Access Control tab.

For reference:
https://learn.microsoft.com/en-us/azure/synapse-analytics/security/synapse-workspace-understand-what-role-you-need#tasks-and-required-roles
https://learn.microsoft.com/en-us/azure/synapse-analytics/security/synapse-workspace-synapse-rbac-roles
Please sign in to rate this answer.

3 people found this answer helpful.
AnnuKumari-MSFT 31,151 Reputation points Microsoft Employee

2022-02-15T10:33:23.253+00:00

Hi @Alex Driver ,
Just checking in to see if the above solution provided by @Vaibhav Chaudhari helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

Alex Driver 1 Reputation point

2022-02-15T10:40:49.2+00:00

Hi @Vaibhav Chaudhari

When I try to search for my user account on the Access Control tab, I get "Failed to find resource".
On the network tab, I can see 403 responses:

It might be worth noting, that I am a Guest account on the Tenant with "Owner" permissions.

Vaibhav Chaudhari 38,621 Reputation points

2022-02-16T06:16:32.883+00:00

Is there anyone who belong to the same Tenant (not a guest user) and who is owner of the Synapse workspace? Probably that user should be able to add your guest user id and grant synapse admin permission

Vaibhav Chaudhari 38,621 Reputation points

2022-02-16T06:18:11.647+00:00

I see this note in given in documentation "A guest users (users from a different AD tenant) can also see and manage role assignment after being assigned the Synapse Administrator role."

https://learn.microsoft.com/en-us/azure/synapse-analytics/security/how-to-review-synapse-rbac-role-assignments
Sign in to comment
Gaurav Batta 11 Reputation points

2022-08-02T00:41:57.147+00:00

I was able to get the issue resolved by following what @Vaibhav Chaudhari suggested. That is under Synapse Studio > Access Control, I had to explicitly add Synapse Administrator privilege for my AD account's object id as well as the object id of service principal which was used by Terraform to spin up this infrastructure. When I was creating Synapse Workspace through Powershell or Azure Portal I did not had this problem. The problem was only coming when using Terraform to create azure synapse workspace. Using Terraform somehow was missing to provide Synapse Administrator role in Access Control to my account.

Thanks!
Please sign in to rate this answer.

2 people found this answer helpful.

0 comments No comments
Sign in to comment
Hamish MacDonald 1 Reputation point

2022-07-04T03:47:15.607+00:00
@Vaibhav Chaudhari was anything further discovered around this issue? I have same issue.

guest user in tenancy

owner of subscription

created synapse analytics workspace

get a 403 when try to add another user as admin.
Please sign in to rate this answer.
WZIAFP 157 Reputation points

2022-07-28T10:57:04.817+00:00

Have you got any firewall settings applied on your workspace? I had to whitelist mine to gain access
Sign in to comment
Gaurav Batta 11 Reputation points

2022-07-25T20:42:13.983+00:00

I am having same exact problem, I am owner of Synapse Analytics and owner of the subscription.
Please sign in to rate this answer.
WZIAFP 157 Reputation points

2022-07-28T15:14:03.693+00:00

Have you checked your Synapse Firewall settings in the portal?
I had to whitelist my IP address to gain access. Also need Storage Blob Contributor role applied to my account
Sign in to comment