ARM template to give permission to AAD application on synapse workspace

kk 41 Reputation points
2022-09-06T15:47:58.147+00:00

Hi,

I have an arm template to provision synapse workspace. I have one App registration which I want to use for synapse artifacts deployment using CD.
For that I have to give below permissions to the AAD. I want to give these permission while I am trying to deploy the synapse workspace using arm template.

Can someone share the template I can add in my arm template for the below permissions?

Type Access Policies
Azure RBAC Reader/Contributor permission for the AAD application on the Synapse workspace
Synapse RBAC Synapse Administrator permission for the AAD application on the synapse workspace

Azure DevTest Labs
Azure DevTest Labs
An Azure service that is used for provisioning development and test environments.
255 questions
Azure Synapse Analytics
Azure Synapse Analytics
An Azure analytics service that brings together data integration, enterprise data warehousing, and big data analytics. Previously known as Azure SQL Data Warehouse.
4,362 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
666 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,455 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. James Hamil 21,621 Reputation points Microsoft Employee
    2022-09-06T18:54:02.997+00:00

    Hi @kk , have you reviewed this document? It details how you can deploy at Synapse workspace with an ARM template as well as assigning permissions. For a more detailed review of ARM user roles, please see this document.

    Please let me know if I misunderstood your question or if you need more assistance!

    If this answer helped you please mark it as "Verified" so other users can reference it.

    Thank you,
    James

    1 person found this answer helpful.
    0 comments