Quickstart: Create an account in the Microsoft Purview governance portal

This quickstart describes the steps to Create a Microsoft Purview (formerly Azure Purview) account through the Azure portal. Then we'll get started on the process of classifying, securing, and discovering your data in the Microsoft Purview Data Map!

The Microsoft Purview governance portal surfaces tools like the Microsoft Purview Data Map and Microsoft Purview Data Catalog that help you manage and govern your data landscape. By connecting to data across your on-premises, multi-cloud, and software-as-a-service (SaaS) sources, the Microsoft Purview Data Map creates an up-to-date map of your data estate. It identifies and classifies sensitive data, and provides end-to-end linage. Data consumers are able to discover data across your organization, and data administrators are able to audit, secure, and ensure right use of your data.

For more information about the governance capabilities of Microsoft Purview, formerly Azure Purview, see our overview page. For more information about deploying Microsoft Purview governance services across your organization, see our deployment best practices.

Prerequisites

  • If you don't have an Azure subscription, create a free subscription before you begin.

  • An Azure Active Directory tenant associated with your subscription.

  • The user account that you use to sign in to Azure must be a member of the contributor or owner role, or an administrator of the Azure subscription. To view the permissions that you have in the subscription, follow these steps:

    1. Go to the Azure portal
    2. Select your username in the upper-right corner.
    3. Select the ellipsis button ("...") for more options.
    4. Then select My permissions.
    5. If you have access to multiple subscriptions, select the appropriate subscription.
  • No Azure Policies preventing creation of Storage accounts or Event Hub namespaces. Microsoft Purview will deploy a managed Storage account and optional Event Hubs namespace when it is created. If a blocking policy exists and needs to remain in place, please follow our Microsoft Purview exception tag guide and follow the steps to create an exception for Microsoft Purview accounts.

Sign in to Azure

Sign in to the Azure portal with your Azure account.

Create an account

Important

If you have any Azure Policies preventing creation of Storage accounts or Event Hub namespaces, or preventing updates to Storage accounts first follow the Microsoft Purview exception tag guide to create an exception for Microsoft Purview accounts. Otherwise you will not be able to deploy Microsoft Purview.

  1. Search for Microsoft Purview in the Azure portal.

    Screenshot showing the purview accounts page in the Azure portal

  2. Select Create to create a new Microsoft Purview account.

    Screenshot of the Microsoft Purview accounts page with the create button highlighted in the Azure portal.

    Or instead, you can go to the marketplace, search for Microsoft Purview, and select Create.

    Screenshot showing Microsoft Purview in the Azure Marketplace, with the create button highlighted.

  3. On the new Create Microsoft Purview account page under the Basics tab, select the Azure subscription where you want to create your account.

  4. Select an existing resource group or create a new one to hold your account.

    To learn more about resource groups, see our article on using resource groups to manage your Azure resources.

  5. Enter a Microsoft Purview account name. Spaces and symbols aren't allowed. The name of the Microsoft Purview account must be globally unique. If you see the following error, change the name of Microsoft Purview account and try creating again.

    Screenshot showing the Create Microsoft Purview account screen with an account name that is already in use, and the error message highlighted.

  6. Choose a location. The list shows only locations that support the Microsoft Purview governance portal. The location you choose will be the region where your Microsoft Purview account and meta data will be stored. Sources can be housed in other regions.

    Note

    The Microsoft Purview, formerly Azure Purview, does not support moving accounts across regions, so be sure to deploy to the correction region. You can find out more information about this in move operation support for resources.

  7. You can choose to enable the optional Event Hubs namespace by selecting the toggle. It's disabled by default. Enable this option if you want to be able to programmatically monitor your Microsoft Purview account using Event Hubs and Atlas Kafka**:

    Screenshot showing the Event Hubs namespace toggle highlighted under the Managed resources section of the Create Microsoft Purview account page.

    Note

    This option can be enabled or disabled after you have created your account in Managed Resources under settings on your Microsoft Purview account page in the Azure Portal.

    Screenshot showing the Event Hubs namespace toggle highlighted on the Managed resources page of the Microsoft Purview account page in the Azure Portal.

  8. Select Review & Create, and then select Create. It takes a few minutes to complete the creation. The newly created account will appear in the list on your Microsoft Purview accounts page.

    Screenshot showing the Create Microsoft Purview account screen with the Review + Create button highlighted

Open the Microsoft Purview governance portal

After your account is created, you'll use the Microsoft Purview governance portal to access and manage it. There are two ways to open the Microsoft Purview governance portal:

  • Open your Microsoft Purview account in the Azure portal. Select the "Open Microsoft Purview governance portal" tile on the overview page. Screenshot showing the Microsoft Purview account overview page, with the Microsoft Purview governance portal tile highlighted.

  • Alternatively, you can browse to https://web.purview.azure.com, select your Microsoft Purview account name, and sign in to your workspace.

Next steps

In this quickstart, you learned how to create a Microsoft Purview (formerly Azure Purview) account, and how to access it.

Next, you can create a user-assigned managed identity (UAMI) that will enable your new Microsoft Purview account to authenticate directly with resources using Azure Active Directory (Azure AD) authentication.

To create a UAMI, follow our guide to create a user-assigned managed identity.

Follow these next articles to learn how to navigate the Microsoft Purview governance portal, create a collection, and grant access to the Microsoft Purview Data Map: