Skip to content

Commit 827351c

Browse files
authored
Merge pull request #183717 from jovanpop-msft/patch-229
Update resources-self-help-sql-on-demand.md
2 parents cbd64fa + 7be42a0 commit 827351c

File tree

1 file changed

+12
-30
lines changed

1 file changed

+12
-30
lines changed

articles/synapse-analytics/sql/resources-self-help-sql-on-demand.md

Lines changed: 12 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -726,29 +726,6 @@ See the [Synapse Studio section](#synapse-studio).
726726

727727
## Security
728728

729-
Make sure that a user has permissions to access databases, and permissions to access [data lake](develop-storage-files-storage-access-control.md?tabs=service-principal) or [Cosmos DB storage](query-cosmos-db-analytical-store.md#prerequisites).
730-
731-
### Cannot read, list or access files on data lake storage
732-
733-
If you are using Azure AD login without explicit credential, make sure that your Azure AD identity can access the files on storage. Your Azure AD identity need to have Blob Data Reader or list/read ACL permissions to access the files - see [Query fails because file cannot be opened](#query-fails-because-file-cannot-be-opened).
734-
735-
If you are accessing storage using [credentials](develop-storage-files-storage-access-control.md#credentials), make sure that your [Managed identity](develop-storage-files-storage-access-control.md?tabs=managed-identity) or [SPN](develop-storage-files-storage-access-control.md?tabs=service-principal) has Data Reader/Contributor role, or ALC permissions. If you have used [SAS token](develop-storage-files-storage-access-control.md?tabs=shared-access-signature) make sure that it has `rl` permission and that it didn't expired.
736-
If you are using SQL login and the `OPENROWSET` function [without data source](develop-storage-files-overview.md#query-files-using-openrowset), make sure that you have a server-level credential that matches the storage URI and has permission to access the storage.
737-
738-
### Cannot access Cosmos DB account
739-
740-
Make sure that your Cosmos DB container has analytical storage. Make sure that you correctly specified account, database, and container name. You must use read-only cosmos DB credential to access your analytical storage, so make sure that it did not expire.
741-
742-
If you are getting the [Resolving Cosmos DB path has failed](#resolving-cosmosdb-path-has-failed) error, make sure that you configured firewall.
743-
744-
### Cannot access Lakehouse/Spark database
745-
746-
If a user cannot access a lake house or Spark database, it might not have permissions to access and read the database. A user with `CONTROL SERVER` permission should have full access to all databases. As a restricted permission, you might try to use [CONNECT ANY DATABASE and SELECT ALL USER SECURABLES](https://techcommunity.microsoft.com/t5/azure-synapse-analytics-blog/synapse-serverless-shared-database-and-tables-access-for-non/ba-p/2645947).
747-
748-
### SQL user cannot access Dataverse tables
749-
750-
Dataverse tables are accessing storage using the callers Azure AD identity. SQL user with high permissions might try to select data from a table, but the table would not be able to access Dataverse data. This scenario is not supported.
751-
752729
### Azure AD service principal login failures when SPI is creating a role assignment
753730
If you want to create role assignment for Service Principal Identifier/Azure AD app using another SPI, or have already created one and it fails to login, you're probably receiving following error:
754731
```
@@ -820,29 +797,34 @@ You don't need to use separate databases to isolate data for different tenants.
820797

821798
## Querying Azure data
822799

823-
Review the following articles to learn more about how to use serverless SQL pool to query data.
800+
Serverless SQL pools enable you to query data in Azure storage or Azure Cosmos DB using [external tables and the OPENROWSET function](develop-storage-files-overview.md).
801+
Make sure that you have proper [permission setup](develop-storage-files-overview.md#permissions) on your storage.
824802

825803
### Querying CSV data
826804

827-
Learn here how to [query single CSV file](query-single-csv-file.md) or [folders and multiple CSV files](query-folders-multiple-csv-files.md)
828-
829-
- [Query specific files](query-specific-files.md)
805+
Learn here how to [query single CSV file](query-single-csv-file.md) or [folders and multiple CSV files](query-folders-multiple-csv-files.md). You can [query partitioned files](query-specific-files.md).
830806

831807
### Querying Parquet data
832808

833-
Learn here how to [query Parquet files](query-parquet-files.md) with [nested types](query-parquet-nested-types.md).
809+
Learn here how to [query Parquet files](query-parquet-files.md) with [nested types](query-parquet-nested-types.md). You can [query partitioned files](query-specific-files.md).
810+
811+
### Querying Delta Lake
812+
813+
Learn here how to [query Delta Lake files](query-delta-lake-format.md) with [nested types](query-parquet-nested-types.md).
834814

835-
### Querying Cosmos DB data
815+
### Querying Cosmos DB data
836816

837817
Learn here how to [query Cosmos DB analytical store](query-cosmos-db-analytical-store.md). You can use [online generator](https://htmlpreview.github.io/?https://github.com/Azure-Samples/Synapse/blob/main/SQL/tools/cosmosdb/generate-openrowset.html) to generate the `WITH` clause based on a sample Cosmos Db document.
818+
Yu can [create views](create-use-views.md#cosmosdb-view)
838819

839820
### Querying JSON data
840821

841-
Learn here how to [query JSON files](query-json-files.md).
822+
Learn here how to [query JSON files](query-json-files.md). You can [query partitioned files](query-specific-files.md).
842823

843824
### Create views, tables and other database objects
844825

845826
Learn here how to create and use [views](create-use-views.md), [external tables](create-use-external-tables.md), or setup [row-level security](https://techcommunity.microsoft.com/t5/azure-synapse-analytics-blog/how-to-implement-row-level-security-in-serverless-sql-pools/ba-p/2354759).
827+
If you have [partitioned files](query-specific-files.md), make sure that you are using [partitioned views](create-use-views.md#partitioned-views).
846828

847829
### Copy and transform data (CETAS)
848830

0 commit comments

Comments
 (0)