You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/data-share/concepts-roles-permissions.md
+20-10Lines changed: 20 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,35 +1,39 @@
1
1
---
2
-
title: Roles and requirements for Azure Data Share Preview
3
-
description: Learn about the access control roles and requirements for data providers and data consumers to share data in Azure Data Share Preview.
2
+
title: Roles and requirements for Azure Data Share
3
+
description: Learn about the access control roles and requirements for data providers and data consumers to share data in Azure Data Share.
4
4
author: joannapea
5
5
ms.author: joanpo
6
6
ms.service: data-share
7
7
ms.topic: conceptual
8
8
ms.date: 07/10/2019
9
9
---
10
10
11
-
# Roles and requirements for Azure Data Share Preview
11
+
# Roles and requirements for Azure Data Share
12
12
13
-
This article describes the roles required to share data using Azure Data Share Preview, as well as to accept and receive data using Azure Data Share Preview.
13
+
This article describes the roles required to share data using Azure Data Share, as well as to accept and receive data using Azure Data Share.
14
14
15
15
## Roles and requirements
16
16
17
17
Azure Data Share uses Managed Identities for Azure Services (previously known as MSIs) to authenticate to underlying storage accounts in order to be able to read data to be shared by a data provider, as well as receive data shared as a data consumer. As a result, there is no exchange of credentials between the data provider and the data consumer.
18
18
19
-
The Managed Service Identity needs to be granted access to the underlying storage accounts. The Azure Data Share service uses the Azure Data Share resource's Managed Service Identity to read and write data. The user of Azure Data Share needs the ability to create a role assignment for the Managed Service Identity to the storage account that they are sharing data from/to. Permission to create role assignments exists in the **owner** role, User Access Administrator role, or a custom role with Microsoft.Authorization/role assignments/write permission assigned.
19
+
The Managed Service Identity needs to be granted access to the underlying storage account or SQL database. The Azure Data Share service uses the Azure Data Share resource's Managed Service Identity to read and write data. The user of Azure Data Share needs the ability to create a role assignment for the Managed Service Identity to the storage account or SQL database that they are sharing data from/to.
20
+
21
+
In the case of storage, Permission to create role assignments exists in the **owner** role, User Access Administrator role, or a custom role with Microsoft.Authorization/role assignments/write permission assigned.
20
22
21
23
If you are not an owner of the storage account in question, and you are unable to create a role assignment for the Azure Data Share resource's Managed Identity yourself, you can request an Azure Administrator to create a role assignment on your behalf.
22
24
23
25
Below is a summary of the roles assigned to Data Share resource-Managed Identity:
|Azure Blob Storage| Storage Blob Data Reader | Storage Blob Data Contributor
29
31
|Azure Data Lake Gen1 | Owner | Not Supported
30
32
|Azure Data Lake Gen2 | Storage Blob Data Reader | Storage Blob Data Contributor
33
+
|Azure SQL | dbo | dbo
31
34
|
32
-
### Data Providers
35
+
36
+
### Data providers
33
37
To add a dataset to an Azure Data Share, the data providers data share resource-managed identity needs to be added to the Storage Blob Data Reader role. This is done automatically by the Azure Data Share service if the user is adding datasets via Azure and is an owner of the storage account, or is a member of a custom role that has the Microsoft.Authorization/role assignments/write permission assigned.
34
38
35
39
Alternatively, the user can have an Azure Administrator add the data share resource-managed identity to the Storage Blob Data Reader role manually. Creating this role assignment manually by the Administrator will void having to be an owner of the Storage account or have a custom role assignment. This applies to data being shared from Azure Storage or Azure Data Lake Gen2.
@@ -45,8 +49,12 @@ To create a role assignment for the Data Share resource's Managed Identity, foll
45
49
1. Under *Select*, type in the name of your Azure Data Share account.
46
50
1. Click *Save*.
47
51
48
-
### Data Consumers
49
-
To receive data, the data consumers data share resource-managed identity needs to be added to the Storage Blob Data Contributor role. This role is required to enable the Azure Data Share service to be able to write to the storage account. This is done automatically by the Azure Data Share service if the user is adding datasets via Azure and is an owner of the storage account, or is a member of a custom role which has the Microsoft.Authorization/role assignments/write permission assigned.
52
+
For SQL-based sources, a user needs to be created from an external provider in the SQL database that data is being shared from with the same name as the Azure Data Share account. A sample script along with other prerequisites for SQL-based sharing can be found in the [share your data](share-your-data.md) tutorial.
53
+
54
+
### Data consumers
55
+
To receive data, the data consumers data share resource-managed identity needs to be added to the Storage Blob Data Contributor role and/or dbo role of a SQL database if receiving data into a SQL database.
56
+
57
+
In the case of storage, this is done automatically by the Azure Data Share service if the user is adding datasets via Azure and is an owner of the storage account, or is a member of a custom role which has the Microsoft.Authorization/role assignments/write permission assigned.
50
58
51
59
Alternatively, the user can have an Azure Administrator add the data share resource-managed identity to the Storage Blob Data Contributor role manually. Creating this role assignment manually by the Administrator will void having to be an owner of the Storage account or have a custom role assignment. Note that this applies to data being shared to Azure Storage or Azure Data Lake Gen2. Receiving data to Azure Data Lake Gen1 is not supported.
52
60
@@ -61,9 +69,11 @@ To create a role assignment for the Data Share resource's Managed Identity manua
61
69
62
70
If you are sharing data using our REST APIs, you will need to create these role assignments manually by adding the data share account in to the appropriate roles.
63
71
72
+
If you are receiving data into a SQL-based source, ensure that a new user is created from an external provider with the same name as your Azure Data Share account. See prerequisites in [accept and receive data](subscribe-to-data-share.md) tutorial.
73
+
64
74
To learn more about how to add a role assignment, refer to [this documentation,](https://docs.microsoft.com/azure/role-based-access-control/role-assignments-portal#add-a-role-assignment) which outlines how to add a role assignment to an Azure resource.
65
75
66
-
## Resource Provider registration
76
+
## Resource provider registration
67
77
68
78
When accepting an Azure Data Share invitation, you will need to manually register the Microsoft.DataShare resource provider in to your subscription. Follow these steps to register the Microsoft.DataShare resource provider into your Azure Subscription.
Copy file name to clipboardExpand all lines: articles/data-share/data-share-troubleshoot.md
+18-4Lines changed: 18 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
-
title: Troubleshoot Azure Data Share Preview
3
-
description: Learn how to troubleshoot issues with invitations and errors when creating or receiving data shares with Azure Data Share Preview.
2
+
title: Troubleshoot Azure Data Share
3
+
description: Learn how to troubleshoot issues with invitations and errors when creating or receiving data shares with Azure Data Share.
4
4
services: data-share
5
5
author: joannapea
6
6
ms.author: joanpo
@@ -9,9 +9,9 @@ ms.topic: troubleshooting
9
9
ms.date: 07/10/2019
10
10
---
11
11
12
-
# Troubleshoot common issues in Azure Data Share Preview
12
+
# Troubleshoot common issues in Azure Data Share
13
13
14
-
This article shows how to troubleshoot common issues for Azure Data Share Preview.
14
+
This article shows how to troubleshoot common issues for Azure Data Share.
15
15
16
16
## Azure Data Share invitations
17
17
@@ -51,6 +51,20 @@ If you receive any of the above errors when creating a new data share or receivi
51
51
1. Click **Add**
52
52
1. Add yourself in as owner.
53
53
54
+
## Troubleshooting SQL-based sharing
55
+
56
+
"Error: x datasets were not added because you do not have the required permissions to share."
57
+
58
+
If you receive this error when adding a dataset from a SQL-based source, it may be because you did not create a user for the Azure Data Share MSI on your SQL Server. To resolve this issue, run the following script:
59
+
60
+
```sql
61
+
create user <share_acct_name>from external provider;
Note that the *<share_acc_name>* is the name of your Data Share Account. If you have not created a Data Share account as yet, you can come back to this pre-requisite later.
65
+
66
+
Ensure that you have followed all prerequisites listed in [Share your data](share-your-data.md) tutorial.
67
+
54
68
## Next steps
55
69
56
70
To learn how to start sharing data, continue to the [share your data](share-your-data.md) tutorial.
Copy file name to clipboardExpand all lines: articles/data-share/how-to-add-datasets.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,22 +1,22 @@
1
1
---
2
-
title: Add datasets to an existing Azure Data Share Preview
3
-
description: Learn how to add datasets to an existing data share in Azure Data Share and share with the same recipients.
2
+
title: Add datasets to an existing Azure Data Share
3
+
description: Learn how to add datasets to an existing data share in Azure Data Share and share with the same recipients.
4
4
author: joannapea
5
5
ms.author: joanpo
6
6
ms.service: data-share
7
7
ms.topic: conceptual
8
8
ms.date: 07/10/2019
9
9
---
10
10
11
-
# How to add datasets to an existing share in Azure Data Share Preview
11
+
# How to add datasets to an existing share in Azure Data Share
12
12
13
-
This article explains how to add datasets to a pre-existing data share using Azure Data Share Preview. This allows you to share more data with the same recipients without having to create a new share.
13
+
This article explains how to add datasets to a pre-existing data share using Azure Data Share. This allows you to share more data with the same recipients without having to create a new share.
14
14
15
15
For information on how to add datasets as you create a share, see the [Share data](share-your-data.md) tutorial.
16
16
17
17
## Navigate to a sent data share
18
18
19
-
In Azure Data Share Preview, navigate to your sent share and select the **Datasets** tab. Click **+ Add Datasets** button to add more datasets.
19
+
In Azure Data Share, navigate to your sent share and select the **Datasets** tab. Click **+ Add Datasets** button to add more datasets.
Copy file name to clipboardExpand all lines: articles/data-share/how-to-add-recipients.md
+5-5Lines changed: 5 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,21 +1,21 @@
1
1
---
2
-
title: Add recipients in Azure Data Share Preview
3
-
description: Learn how to add recipients to an existing data share in Azure Data Share preview.
2
+
title: Add recipients in Azure Data Share
3
+
description: Learn how to add recipients to an existing data share in Azure Data Share.
4
4
author: joannapea
5
5
ms.author: joanpo
6
6
ms.service: data-share
7
7
ms.topic: conceptual
8
8
ms.date: 07/10/2019
9
9
---
10
-
# How to add a recipient to an existing data share in Azure Data Share Preview
10
+
# How to add a recipient to an existing data share in Azure Data Share
11
11
12
-
This article will show you how to add recipients to a pre-existing data share.
12
+
This article will show you how to add recipients to a pre-existing data share.
13
13
14
14
For information on how to add recipients as you create a share, see the [Share data](share-your-data.md) tutorial.
15
15
16
16
## Navigate to a sent data share
17
17
18
-
In Azure Data Share Preview, navigate to your sent share and select the **Invitations** tab. Listed here are all of the recipients of invitations to this data share. To add a new one, click **Add Recipient**.
18
+
In Azure Data Share, navigate to your sent share and select the **Invitations** tab. Listed here are all of the recipients of invitations to this data share. To add a new one, click **Add Recipient**.
Copy file name to clipboardExpand all lines: articles/data-share/how-to-configure-mapping.md
+14-8Lines changed: 14 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,31 +1,37 @@
1
1
---
2
-
title: Configure a dataset mapping in Azure Data Share Preview
3
-
description: Learn how to configure a dataset mapping for a received share using Azure Data Share Preview.
2
+
title: Configure a dataset mapping in Azure Data Share
3
+
description: Learn how to configure a dataset mapping for a received share using Azure Data Share.
4
4
author: joannapea
5
5
ms.author: joanpo
6
6
ms.service: data-share
7
7
ms.topic: conceptual
8
8
ms.date: 07/10/2019
9
9
---
10
-
# How to configure a dataset mapping for a received share in Azure Data Share Preview
10
+
# How to configure a dataset mapping for a received share in Azure Data Share
11
11
12
-
This article explains how to configure a dataset mapping for a Received Share using Azure Data Share Preview. You'll want to do this if you accepted a data share invitation but opted to "Accept and configure later". Otherwise, you may simply want to change the destination storage account for your received data.
12
+
This article explains how to configure a dataset mapping for a Received Share using Azure Data Share. You'll want to do this if you accepted a data share invitation but opted to "Accept and configure later". You may want to configure a dataset mapping if you need to change the destination for data being shared with you, or if you want to receive data into a SQL Server.
13
13
14
14
## Navigate to a received data share
15
15
16
16
In the Azure Data Share service, navigate to your received share and select the **Details** tab.
Check the box next to the dataset you'd like to assign a destination to, and click **+ Map to target**. You may need to unmap first if you had already configured a destination storage account and you want to change the mapping to a different storage account.
20
+
Check the box next to the dataset you'd like to assign a destination to. Select **Unmap**to unmap the existing mapping. Select **+ Map to target**to choose a new destination store.
21
21
22
22

23
23
24
-
## Select a new storage account
24
+
## Select a new destination store
25
25
26
-
Select a storage account that you'd like the data to land in. Note that any data that already exists in any previously mapped storage accounts will not be automatically moved to the new storage account.
26
+
Select a target data type that you'd like the data to land in. Note that any data that already exists in any previously mapped storage accounts will not be automatically moved to the new destination.
Copy file name to clipboardExpand all lines: articles/data-share/how-to-delete-invitation.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,19 +1,19 @@
1
1
---
2
-
title: Delete an invitation in Azure Data Share Preview
3
-
description: Learn how to delete an invitation to a data share recipient in Azure Data Share Preview.
2
+
title: Delete an invitation in Azure Data Share
3
+
description: Learn how to delete an invitation to a data share recipient in Azure Data Share.
4
4
author: joannapea
5
5
ms.author: joanpo
6
6
ms.service: data-share
7
7
ms.topic: conceptual
8
8
ms.date: 07/10/2019
9
9
---
10
-
# How to delete an invitation to a recipient in Azure Data Share Preview
10
+
# How to delete an invitation to a recipient in Azure Data Share
11
11
12
12
This article explains how to delete an invitation to a recipient before they accept it. This will prevent them from creating a share subscription and they will never receive any shared data. If you delete the invitation to a consumer who has already created a share subscription, deleting their invitation won't have any impact.
13
13
14
14
## Navigate to a sent data share
15
15
16
-
In Azure Data Share Preview, navigate to your sent share and select the **Invitations** tab. Listed here are all of the recipients of invitations to this data share. Click the boxes next to the recipients whose invitations you would like to delete and then click **Delete**.
16
+
In Azure Data Share, navigate to your sent share and select the **Invitations** tab. Listed here are all of the recipients of invitations to this data share. Click the boxes next to the recipients whose invitations you would like to delete and then click **Delete**.
Copy file name to clipboardExpand all lines: articles/data-share/how-to-monitor.md
+5-4Lines changed: 5 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,15 +1,16 @@
1
1
---
2
-
title: How to monitor Azure Data Share Preview
3
-
description: Learn how to monitor invitation status, share subscriptions, and snapshot history in Azure Data Share Preview.
2
+
title: How to monitor Azure Data Share
3
+
description: Learn how to monitor invitation status, share subscriptions, and snapshot history in Azure Data Share
4
4
author: joannapea
5
5
ms.author: joanpo
6
6
ms.service: data-share
7
7
ms.topic: conceptual
8
8
ms.date: 07/10/2019
9
9
---
10
-
# Monitor Azure Data Share Preview
11
10
12
-
This article explains how you can monitor your data shares using Azure Data Share Preview. As a data provider, you are able to monitor various aspects of your data sharing relationships. Details such as whether your data consumers have accepted your invitation to the data share, as well as whether they have created a share subscription and started to use your data are all available to monitor.
11
+
# Monitor Azure Data Share
12
+
13
+
This article explains how you can monitor your data shares using Azure Data Share. As a data provider, you are able to monitor various aspects of your data sharing relationships. Details such as whether your data consumers have accepted your invitation to the data share, as well as whether they have created a share subscription and started to use your data are all available to monitor.
13
14
14
15
As a data consumer, you can monitor the snapshots that have been triggered into your Azure subscription.
0 commit comments