Skip to content

Commit 69247d0

Browse files
Merge pull request #213649 from inward-eye/main
changes in register-scan doc
2 parents af6017e + f9f0612 commit 69247d0

File tree

1 file changed

+20
-2
lines changed

1 file changed

+20
-2
lines changed

articles/purview/register-scan-adls-gen2.md

Lines changed: 20 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -313,9 +313,27 @@ Source storage account can support up to 20 targets, and target storage account
313313

314314
## Access policy
315315

316+
### Access policy pre-requisites on Azure Storage accounts
317+
[!INCLUDE [Access policies Azure Storage specific pre-requisites](./includes/access-policies-prerequisites-storage.md)]
318+
319+
### Configuration of Microsoft Purview account for policies
320+
[!INCLUDE [Access policies generic configuration](./includes/access-policies-configuration-generic.md)]
321+
322+
### Register the data source in Microsoft Purview for Data Use Management
323+
The Azure Storage resource needs to be registered first with Microsoft Purview before you can create access policies.
324+
To register your resources, follow the **Prerequisites** and **Register** sections of these guides:
325+
- [Register and scan Azure Storage Blob - Microsoft Purview](register-scan-azure-blob-storage-source.md#prerequisites)
326+
- [Register and scan Azure Data Lake Storage (ADLS) Gen2 - Microsoft Purview](register-scan-adls-gen2.md#prerequisites)
327+
328+
After you've registered the data source, you'll need to enable Data Use Management. This enables access policies on the Storage account. Data Use Management can impact the security of your data, as it delegates to certain Microsoft Purview roles to manage access to the data sources. **Go through the secure practices related to Data Use Management in this guide**: [How to enable Data Use Management](./how-to-enable-data-use-management.md)
329+
330+
Once your data source has the **Data Use Management** option set to **Enabled**, it will look like this picture:
331+
![Screenshot shows how to register a data source for policy with the option Data use management set to enable](./media/how-to-policies-data-owner-storage/register-data-source-for-policy-storage.png)
332+
333+
### Create a policy
316334
To create an access policy for Azure Data Lake Storage Gen 2, follow these guides:
317-
* [Single storage account](./how-to-policies-data-owner-storage.md) - This guide will allow you to enable access policies on a single Azure Storage account in your subscription.
318-
* [All sources in a subscription or resource group](./how-to-policies-data-owner-resource-group.md) - This guide will allow you to enable access policies on all enabled and available sources in a resource group, or across an Azure subscription.
335+
* [Data owner policy on a single storage account](./how-to-policies-data-owner-storage.md) - This guide will allow you to provision access on a single Azure Storage account in your subscription.
336+
* [Data owner policy covering all sources in a subscription or resource group](./how-to-policies-data-owner-resource-group.md) - This guide will allow you to provision access on all enabled data sources in a resource group, or across an Azure subscription. The pre-requisite is that the subscription or resource group is registered with the Data use management option enabled.
319337

320338
## Next steps
321339

0 commit comments

Comments
 (0)