Microsoft Purview Data Lake Gen2 scan failes to discover assets

Question

I registered a data lake Gen2 resource and gave the Purview Managed Identity read access to the data lake storage account as explained in detail in the purview documentation. Then I started a scan and made sure that the connection was valid.

Yet when I go to the next screen (Scope your scan) and try to open the container I get the access control error:
Purview scan Request failed with status code 403 Error: (3835) Failed to access the ADLS Gen2 storage with the Managed Identity.

It is no surprise that the scan does not find any asset other than the data lake itself.

What can be done to solve this problem so the scan registers all the assets in my data lake?

Answer 1

Hello @Manu Cohen-Yashar ,

Thanks for the question and using MS Q&A platform.

From the error message it seems like purely a permission issue to your ADLS Gen 2 account.

When you say reader access, have you given Storage Blob Data Reader role on your ADLS Gen 2 account or just Reader access?

In case if your ADLS Gen 2 account has firewall restrictions to allow only selected networks then please follow below steps from the documentation: Microsoft Purview- ADLS Gen2 Authentication for a scan

Hope this info helps. Do let us know how it goes.

Thank you