Create a Microsoft Graph Logs connection

Important

This feature is in Beta. To use it, a workspace admin must turn on Lakeflow Connect for Microsoft Graph Logs from the Previews page. See Manage Azure Databricks previews.

Create a Microsoft Graph Logs connection in Catalog Explorer to store authentication credentials for Lakeflow Connect ingestion. Any user with the USE CONNECTION privilege on the connection can then create Microsoft Graph Logs ingestion pipelines without needing direct access to the credentials.

Alternatively, admin users can create a connection and a pipeline at the same time in the data ingestion UI. See Ingest data from Microsoft Graph.

For privilege requirements, see Connect to managed ingestion sources.

Prerequisites

Complete the source setup. Use the credentials retrieved there to create the connection.

Create a connection

1. In the Azure Databricks workspace, click Catalog > Create > Create a connection.
2. On the Connection basics page of the Set up connection wizard, specify a Connection name.
3. In the Connection type drop-down menu, select Microsoft Graph Logs.
4. (Optional) Add a comment.
5. Click Next.
6. On the Authentication page, enter the following credentials from Configure authentication to Microsoft Graph:
   • Microsoft cloud: The Microsoft cloud that your tenant runs in. Use commercial for the global service, including Government Community Cloud (GCC). Use gcc_high for US Government GCC High, or dod for US Government Department of Defense (DoD).
   • Client ID: The client ID of your Microsoft Entra ID application.
   • Client Secret: The client secret of your Microsoft Entra ID application.
   • Tenant ID: The unique identifier (GUID) of your Microsoft Entra ID tenant.
7. Click Create connection.

Next steps

Create an ingestion pipeline.