You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/synapse-analytics/security/how-to-manage-synapse-rbac-role-assignments.md
+15-15Lines changed: 15 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ author: meenalsri
5
5
ms.service: azure-synapse-analytics
6
6
ms.topic: how-to
7
7
ms.subservice: security
8
-
ms.date: 3/7/2022
8
+
ms.date: 02/18/2025
9
9
ms.author: mesrivas
10
10
ms.reviewer: whhender, wiassaf
11
11
---
@@ -20,23 +20,23 @@ This article shows how to add and delete Synapse RBAC role assignments.
20
20
>- To manage Synapse RBAC role assignments you need to have the Synapse Administrator role on the workspace or at a lower-level scope that includes the objects you want to manage. If you are a Synapse Administrator on the workspace you can grant access to all objects in the workspace.
21
21
>-**Guest users** from a different AD tenant can also see and manage role assignments after being assigned the Synapse Administrator role.
22
22
>- To help you regain access to a workspace in the event that no Synapse Administrators are assigned or available to you, users with permissions to manage **Azure RBAC** role assignments on the workspace can also manage **Synapse RBAC** role assignments, allowing the addition of Synapse Administrator or other Synapse role assignments.
23
-
>- Access to SQL pools is managed using SQL permissions. With the exception of the Synapse Administrator and Synapse SQL Administrator roles, Synapse RBAC roles do not grant access to SQL pools.
23
+
>- Access to SQL pools is managed using SQL permissions. With the exception of the Synapse Administrator and Synapse SQL Administrator roles, Synapse RBAC roles do not grant access to SQL pools.
24
24
25
25
>[!important]
26
26
>- Changes made to Synapse RBAC role assignments may take 2-5 minutes to take effect.
27
-
>- If you are managing Synapse RBAC permissions by modifying membership of security groups, then changes to membership are managed using Microsoft Entra ID. Changes to group memberships may take 10-15 minutes or longer to take effect.
27
+
>- If you are managing Synapse RBAC permissions by modifying membership of security groups, then changes to membership are managed using Microsoft Entra ID. Changes to group memberships may take 10-15 minutes or longer to take effect.
28
28
29
29
## Open Synapse Studio
30
30
31
31
To assign a role to a user, group, service principal, or managed identity, first [open the Synapse Studio](https://web.azuresynapse.net/) and log into your workspace.
32
32
33
-

34
-
35
-
Once you've opened your workspace, expand the **Security** section on the left and select **Access control**.
33
+

34
+
35
+
In your workspace, expand the **Security** section on the left and select **Access control**.
36
36
37
37

38
38
39
-
The Access control screen lists current role assignments. You can filter the list by principal name or email, and selectively filter the object types, roles, or scopes included. From this screen, you can add or remove role assignments.
39
+
The Access control screen lists current role assignments. You can filter the list by principal name or email, and selectively filter the object types, roles, or scopes included. From this screen, you can add or remove role assignments.
40
40
41
41
## Add a Synapse role assignment
42
42
@@ -48,32 +48,32 @@ On the Add role assignment tab, you can create role assignments at workspace sco
48
48
49
49
## Add workspace-scoped role assignment
50
50
51
-
First, select **Workspace** as the scope, then select the **Synapse RBAC role**. Select the **principal(s)** to be assigned the role, then create the role assignment(s).
51
+
First, select **Workspace** as the scope, then select the **Synapse RBAC role**. Select the **principal(s)** to be assigned the role, then create the role assignment(s).
52
52
53
53

54
54
55
55
The assigned role will apply for all applicable objects in the workspace.
56
56
57
57
## Add workspace item-scoped role assignment
58
58
59
-
To assign a role at a finer-grained scope, select **Workspace item** as the scope, then select the scoping **Item type**.
59
+
To assign a role at a finer-grained scope, select **Workspace item** as the scope, then select the scoping **Item type**.
60
60
61
61

62
62
63
-
Select the specific **item** to be used as the scope, then select the **role** to be assigned from the drop-down. The drop-down lists only those roles that are valid for the selected item type. [Learn more](./synapse-workspace-synapse-rbac.md).
63
+
Select the specific **item** to be used as the scope, then select the **role** to be assigned from the drop-down. The drop-down lists only those roles that are valid for the selected item type. [Learn more](./synapse-workspace-synapse-rbac.md).
64
64
65
65

66
66
67
-
Then **select the principal(s)** to which the role is to be assigned. You can iteratively select multiple principals. Select **Apply** to create the role assignment(s).
67
+
Then **select the principal(s)** to which the role is to be assigned. You can iteratively select multiple principals. Select **Apply** to create the role assignment(s).
68
68
69
69
## Remove a Synapse RBAC role assignment
70
70
71
-
To revoke Synapse RBAC access, you remove the appropriate role assignments. On the Access control screen, use the filters to locate the role assignment(s) to be removed. Check the role assignments and then select **Remove access**.
71
+
To revoke Synapse RBAC access, you remove the appropriate role assignments. On the Access control screen, use the filters to locate the role assignment(s) to be removed. Check the role assignments and then select **Remove access**.
72
72
73
73

74
74
75
-
Remember that changes to role assignments will take 2-5 minutes to take effect.
75
+
Remember that changes to role assignments will take 2-5 minutes to take effect.
76
76
77
-
## Next steps
77
+
## Related content
78
78
79
-
[Understand the Synapse RBAC roles required to perform common tasks](./synapse-workspace-understand-what-role-you-need.md)
79
+
[Understand the Synapse RBAC roles required to perform common tasks](./synapse-workspace-understand-what-role-you-need.md).
0 commit comments