Synapse Roles with only required permissions

Question

All the available Synapse RBAC roles have DELETE and CREATE permissions for Database and Lake DB. I want to restrict the permissions to the users ability to create or delete. Can the available roles be customised to use only below permissions or a custom role can be created for the same?

workspaces/read
workspaces/artifacts/read
workspaces/bigDataPools/useCompute/action
workspaces/bigDataPools/viewLogs/action
workspaces/notebooks/viewOutputs/action
workspaces/artifacts/read
workspaces/notebooks/write, delete
workspaces/sparkJobDefinitions/write
workspaces/sqlScripts/write

Answer 1

Hello @Anonymous ,

Thanks for the question and using MS Q&A platform.

Unfortunately, there is no custom RBAC role which helps to create and delete database and Lake DB.

Reason: Access to SQL pools is managed using SQL permissions. With the exception of the Synapse Administrator and Synapse SQL Administrator roles, Synapse RBAC roles do not grant access to SQL pools.

For more details, refer to How to manage Synapse RBAC role assignments in Synapse Studio.

Hope this will help. Please let us know if any further queries.

------------------------------

• Please don't forget to click on or upvote button whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how
• Want a reminder to come back and check responses? Here is how to subscribe to a notification
• If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators