Unable scale synapse pool using ADF managed identity

Question

Hi Folks,

We are trying to create pipeline to scale up synapse pool dynamically using below documentation:
https://microsoft-bitools.blogspot.com/2021/01/scaling-azure-dedicated-sql-pools-from.html
Datafactory account has Sql contributor role on Azure synapse db pool but I get below error:
'
Operation on target DW scaling activity failed: {"error":{"code":"AuthorizationFailed","message":"The client '' with object id '' does not have authorization to perform action does not have authorization to perform action 'Microsoft.Synapse/workspaces/sqlPools/write' over scope '/subscriptions/subscription_id/resourceGroups/ResourcegroupName/providers/Microsoft.Synapse/workspaces/sqldbpool_server_name/sqlPools/databasename' or the scope is invalid.

Any workaround or suggestion here.

Answer 1

Hi anonymous user ,

Welcome to Microsoft Q&A platform and thanks for posting your query.

As I understand your question, you want to build a pipeline that will automatically scale dedicated sql pool in Synapse analytics, please let me know if my understanding is incorrect.

For this purpose , Azure Synapse managed Identity (same name as Synapse workspace name) needs to have Contributor access in Azure Synapse Analytics.

Check this article for more details: Prerequisites to make request to dedicated SQL pools
This article describes how to pause and resume Dedicated sql pool. Similar to that, you can make a REST API call to scale the SQL pool. Kindly check if providing contributor access helps you to achieve the requirement. I will try to reproduce your scenario if it doesn't help, kindly revert back on the same.

Hope this will help. Please let us know if any further queries.

------------------------------

• Please don't forget to click on or upvote button whenever the information provided helps you.
  Original posters help the community find answers faster by identifying the correct answer. Here is how
• Want a reminder to come back and check responses? Here is how to subscribe to a notification
• If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators

Answer 2

Hi anonymous user ,
Thankyou for reaching back.

The document you are following seems have outdated API version. I tried to create Synapse pipeline for the above requirement and was able to get through. Although I haven't explored it using ADF , but when It's working for me by creating Synapse pipeline. I provided contributor access to synapse managed identity in synapse workspace.

1. Inside the web activity settings, use the URL:

https://management.azure.com/subscriptions/{SubscriptionID}/resourceGroups/{ResourceGroupName}/providers/Microsoft.Synapse/workspaces/{SynapseWorkspaceName}/sqlPools/{SQLPoolName}?api-version=2021-04-01-preview

2. Select method as PUT

3. Provide Header as : Content-Type application/json

4. Provide body in this format :

{ "location": "eastus", "sku": {"name": "DW200c"} }

Other supported api-versions are '2019-06-01-preview, 2020-12-01, 2021-03-01, 2021-04-01-preview, 2021-05-01, 2021-06-01-preview, 2021-06-01, 2020-04-01-preview'. Other supported locations are 'westus2, eastus, northeurope, westeurope, southeastasia, australiaeast, westcentralus, southcentralus, eastus2, uksouth, westus, australiasoutheast, eastasia, brazilsouth, centralus, centralindia, japaneast, northcentralus, canadacentral, canadaeast, koreacentral, southafricanorth, ukwest, japanwest, francecentral, switzerlandnorth, germanywestcentral, norwayeast, uaenorth, westus3, jioindiawest, southindia'

5. Provide authentication method as : 'System Assigned Managed Identity' and resource as : https://management.azure.com/

Attaching the video for reference:

-------------------

Hope it helps. Please do consider clicking Accept Answer and Up-Vote for the same as accepted answers help community as well.