You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/purview/how-to-access-policies-storage.md
+12-12Lines changed: 12 additions & 12 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ ms.author: vlrodrig
6
6
ms.service: purview
7
7
ms.subservice: purview-data-policies
8
8
ms.topic: how-to
9
-
ms.date: 12/10/2021
9
+
ms.date: 12/13/2021
10
10
ms.custom:
11
11
---
12
12
@@ -16,7 +16,7 @@ ms.custom:
16
16
This guide describes how a data owner can enable access to data stored in Azure Storage from Azure Purview. The Azure Purview policy authoring supports the following capabilities:
17
17
- Allow access to data stored in Blob and Azure Data Lake Storage (ADLS) Gen2.
18
18
19
-
> [!NOTE]
19
+
> [!Note]
20
20
> These capabilities are currently in preview. This preview version is provided without a service level agreement, and should not be used for production workloads. Certain features might not be supported or might have constrained capabilities. For more information, see [Supplemental Terms of Use for Microsoft Azure
@@ -70,7 +70,7 @@ Register and scan each data source with Purview to later define access policies.
70
70
71
71
If you would like to use a data source to create access policies in Purview, enable it for access policy through the **Data use governance** toggle, as shown in the picture.
72
72
73
-
:::image type="content" source="./media/how-to-access-policies-storage/register-data-source-for-policy.png" alt-text="Image shows how to register a data source for policy.":::
73
+
:::image type="content" source="./media/how-to-access-policies-storage/register-data-source-for-policy-storage.png" alt-text="Image shows how to register a data source for policy.":::
74
74
75
75
>[!Note]
76
76
> - To disable a source for *Data use Governance*, remove it first from being bound (i.e. published) in any policy.
@@ -110,21 +110,21 @@ This section describes the steps to create a new policy in Azure Purview.
110
110
111
111
1. To add policy statements to the new policy, select the **New policy statement** button. This will bring up the policy statement builder.
112
112
113
-
:::image type="content" source="./media/how-to-access-policies-storage/create-new-policy-storage.png" alt-text="Image shows how a data owner can create a new policy statement.":::
114
-
115
-
1. Select the **Action** button and choose Read or Modify from the drop-down list.
113
+
:::image type="content" source="./media/how-to-access-policies-storage/create-new-policy.png" alt-text="Image shows how a data owner can create a new policy statement.":::
116
114
117
115
1. Select the **Effect** button and choose Allow from the drop-down list.
118
116
117
+
1. Select the **Action** button and choose Read or Modify from the drop-down list.
118
+
119
119
1. Select the **Data Resources** button to bring up the options to provide the data asset path, which will open on the right.
120
120
121
121
1. Use the **Assets** box if you scanned the data source, otherwise use the **Data sources** box above. Assuming the first, in the **Assets** box, enter the **Data Source Type** and select the **Name** of a previously registered data source.
122
122
123
-
:::image type="content" source="./media/how-to-access-policies-storage/select-data-source-type-storage.png" alt-text="Image shows how a data owner can select a Data Resource when editing a policy statement.":::
123
+
:::image type="content" source="./media/how-to-access-policies-storage/select-data-source-type.png" alt-text="Image shows how a data owner can select a Data Resource when editing a policy statement.":::
124
124
125
125
1. Select the **Continue** button and transverse the hierarchy to select the folder or file. Then select the **Add** button. This will take you back to the policy editor.
126
126
127
-
:::image type="content" source="./media/how-to-access-policies-storage/select-asset-storage.png" alt-text="Image shows how a data owner can select the asset when creating or editing a policy statement.":::
127
+
:::image type="content" source="./media/how-to-access-policies-storage/select-asset.png" alt-text="Image shows how a data owner can select the asset when creating or editing a policy statement.":::
128
128
129
129
1. Select the **Subjects** button and enter the subject identity as a principal, group, or MSI. Then select the **OK** button. This will take you back to the policy editor
130
130
@@ -134,7 +134,7 @@ This section describes the steps to create a new policy in Azure Purview.
134
134
135
135
1. Select the **Save** button to save the policy
136
136
137
-
> [!NOTE]
137
+
> [!Note]
138
138
> Policy statements set below container level on a Storage account are supported. If no access has been provided at Storage account level or container level, then the App that will execute the access will need to provide a fully qualified name (i.e., a direct absolute path) to the data object. The following documents show examples of how to do that:
139
139
> -[*abfs* for ADLS Gen2](../hdinsight/hdinsight-hadoop-use-data-lake-storage-gen2.md#access-files-from-the-cluster)
140
140
> -[*az storage blob download* for Blob Storage](../storage/blobs/storage-quickstart-blobs-cli.md#download-a-blob)
@@ -158,7 +158,7 @@ Steps to create a new policy in Purview are as follows.
158
158
159
159
1. The policy details page will appear, including Edit and Delete options. Select the **Edit** button, which brings up the policy statement builder for the statements in this policy. Now, any parts of the statements in this policy can be updated. To delete the policy, use the **Delete** button.
160
160
161
-
:::image type="content" source="./media/how-to-access-policies-storage/edit-policy-storage.png" alt-text="Image shows how a data owner can edit or delete a policy statement.":::
161
+
:::image type="content" source="./media/how-to-access-policies-storage/edit-policy.png" alt-text="Image shows how a data owner can edit or delete a policy statement.":::
162
162
163
163
### Publish the policy
164
164
@@ -174,11 +174,11 @@ The steps to publish a policy are as follows
174
174
175
175
1. The Policy portal will present the list of existing policies in Purview. Locate the policy that needs to be published. Select the **Publish** button on the right top corner of the page.
176
176
177
-
:::image type="content" source="./media/how-to-access-policies-storage/publish-policy-storage.png" alt-text="Image shows how a data owner can publish a policy.":::
177
+
:::image type="content" source="./media/how-to-access-policies-storage/publish-policy.png" alt-text="Image shows how a data owner can publish a policy.":::
178
178
179
179
1. A list of data sources is displayed. You can enter a name to filter the list. Then, select each data source where this policy is to be published and then select the **Publish** button.
180
180
181
-
:::image type="content" source="./media/how-to-access-policies-storage/select-data-sources-publish-policy-storage.png" alt-text="Image shows how a data owner can select the data source where the policy will be published.":::
181
+
:::image type="content" source="./media/how-to-access-policies-storage/select-data-sources-publish-policy.png" alt-text="Image shows how a data owner can select the data source where the policy will be published.":::
182
182
183
183
>[!Important]
184
184
> - Publish is a background operation. It can take up to **2 hours** for the changes to be reflected in the data source.
0 commit comments