Quickstart: Create an account in the Microsoft Purview governance portal

  • Artikel

Important

You can only create one Microsoft Purview account per tenant. If your organization already has a Microsoft Purview account, you will not be able to create a new Microsoft Purview account unless your organization already had multiple accounts and is still under the the pre-existing quota. For more information, see the FAQ.

This quickstart describes the steps to Create a Microsoft Purview (formerly Azure Purview) account through the Azure portal. Then we'll get started on the process of classifying, securing, and discovering your data in the Microsoft Purview Data Map!

The Microsoft Purview governance portal surfaces tools like the Microsoft Purview Data Map and Microsoft Purview Data Catalog that help you manage and govern your data landscape. By connecting to data across your on-premises, multicloud, and software-as-a-service (SaaS) sources, the Microsoft Purview Data Map creates an up-to-date map of your data estate. It identifies and classifies sensitive data, and provides end-to-end linage. Data consumers are able to discover data across your organization, and data administrators are able to audit, secure, and ensure right use of your data.

For more information about the governance capabilities of Microsoft Purview, see our governance solutions overview page For more information about deploying Microsoft Purview governance services across your organization, see our deployment best practices.

Prerequisites

  • If you don't have an Azure subscription, create a free subscription before you begin.

  • An Microsoft Entra tenant associated with your subscription.

  • The user account that you use to sign in to Azure must be a member of the contributor or owner role, or an administrator of the Azure subscription. To view the permissions that you have in the subscription, follow these steps:

    1. Go to the Azure portal
    2. Select your username in the upper-right corner.
    3. Select the ellipsis button ("...") for more options.
    4. Then select My permissions.
    5. If you have access to multiple subscriptions, select the appropriate subscription.

  • No Azure Policies preventing the creation or update of Storage accounts. Microsoft Purview will deploy a managed Storage account when it is created. If a blocking policy exists and needs to remain in place, please follow our Microsoft Purview exception tag guide and follow the steps to create an exception for Microsoft Purview accounts.

Sign in to Azure

Sign in to the Azure portal with your Azure account.

Create an account

Important

If you have any Azure Policies preventing creation of Storage accounts or Event Hub namespaces, or preventing updates to Storage accounts first follow the Microsoft Purview exception tag guide to create an exception for Microsoft Purview accounts. Otherwise you will not be able to deploy Microsoft Purview.

Tip

If you're creating the first Microsoft Purview account in your tenant, you don't need to set anything up and you should use the free version of Microsoft Purview governance solutions at https://purview.microsoft.com.

  1. Search for Microsoft Purview in the Azure portal.

    Screenshot showing the purview accounts page in the Azure portal

  2. Select Create to create a new Microsoft Purview account.

    Screenshot of the Microsoft Purview accounts page with the create button highlighted in the Azure portal.

    Or instead, you can go to the marketplace, search for Microsoft Purview, and select Create.

    Screenshot showing Microsoft Purview in the Azure Marketplace, with the create button highlighted.

  3. On the new Create Microsoft Purview account page under the Basics tab, select the Azure subscription where you want to create your account.

  4. Select an existing resource group or create a new one to hold your account.

    To learn more about resource groups, see our article on using resource groups to manage your Azure resources.

  5. Enter a Microsoft Purview account name. Spaces and symbols aren't allowed. The name of the Microsoft Purview account must be globally unique. If you see the following error, change the name of Microsoft Purview account and try creating again.

    Screenshot showing the Create Microsoft Purview account screen with an account name that is already in use, and the error message highlighted.

  6. Choose a location. The list shows only locations that support the Microsoft Purview governance portal. The location you choose will be the region where your Microsoft Purview account and meta data will be stored. Sources can be housed in other regions.

    Note

    The Microsoft Purview, formerly Azure Purview, does not support moving accounts across regions, so be sure to deploy to the correction region. You can find out more information about this in move operation support for resources.

  7. You can choose a name for your managed resource group. Microsoft Purview will create a managed storage account in this group that it will use during its processes.

  8. On the Networking tab you can choose to connect to all networks, or to use private endpoints. For more information and configuration options, see Configure firewall settings for your Microsoft Purview account and private endpoints for Microsoft Purview articles.

  9. On Configuration tab you can choose to configure Event Hubs namespaces to programmatically monitor your Microsoft Purview account using Event Hubs and Atlas Kafka.

    Screenshot showing the Event Hubs configuration page in the Create Microsoft Purview account window.

    Note

    These options can be configured after you have created your account in Kafka configuration under settings on your Microsoft Purview account page in the Azure Portal.

    Screenshot showing Kafka configuration option on the Microsoft Purview account page in the Azure Portal.

  10. On the Tags tab, add a tag called Purview environment, and give it one of the below values:

    Value Meaning
    Production This account is being used or will be used in the future to support all my cataloging and governance requirements in production.
    Pre-Production This account is being used or will be used in the future to validate cataloging and governance requirements before making it available to my users in production.
    Test This account is being used or will be used in the future to test out capabilities in Microsoft Purview Governance.
    Dev This account is being used or will be used in the future to test out capabilities or develop custom code, scripts etc. in Microsoft Purview Governance.
    Proof of Concept This account is being used or will be used in the future to test out capabilities or develop custom code, scripts etc. in Microsoft Purview Governance.

    Screenshot showing the tags tab, with a Purview environment tag added with the value Production.

  11. Select Review & Create, and then select Create. It takes a few minutes to complete the creation. The newly created account will appear in the list on your Microsoft Purview accounts page.

    Screenshot showing the Create Microsoft Purview account screen with the Review + Create button highlighted

Open the Microsoft Purview governance portal

After your account is created, you'll use the Microsoft Purview governance portal to access and manage it. There are two ways to open the Microsoft Purview governance portal:

  • You can browse directly to https://web.purview.azure.com, select your Microsoft Purview account name, and sign in to your workspace.
  • Alternatively, open your Microsoft Purview account in the Azure portal. Select the Open Microsoft Purview governance portal tile on the overview page. Screenshot showing the Microsoft Purview account overview page, with the Microsoft Purview governance portal tile highlighted.

Next steps

In this quickstart, you learned how to create a Microsoft Purview (formerly Azure Purview) account, and how to access it.

Next, you can create a user-assigned managed identity (UAMI) that will enable your new Microsoft Purview account to authenticate directly with resources using Microsoft Entra authentication.

To create a UAMI, follow our guide to create a user-assigned managed identity.

Follow these next articles to learn how to navigate the Microsoft Purview governance portal, create a collection, and grant access to the Microsoft Purview Data Map: