Skip to content

Commit 8596a6a

Browse files
committed
Format, acrolinx, and image updates
1 parent fc27530 commit 8596a6a

File tree

3 files changed

+15
-15
lines changed

3 files changed

+15
-15
lines changed

articles/synapse-analytics/security/how-to-manage-synapse-rbac-role-assignments.md

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ author: meenalsri
55
ms.service: azure-synapse-analytics
66
ms.topic: how-to
77
ms.subservice: security
8-
ms.date: 3/7/2022
8+
ms.date: 02/18/2025
99
ms.author: mesrivas
1010
ms.reviewer: whhender, wiassaf
1111
---
@@ -20,23 +20,23 @@ This article shows how to add and delete Synapse RBAC role assignments.
2020
>- To manage Synapse RBAC role assignments you need to have the Synapse Administrator role on the workspace or at a lower-level scope that includes the objects you want to manage. If you are a Synapse Administrator on the workspace you can grant access to all objects in the workspace.
2121
>- **Guest users** from a different AD tenant can also see and manage role assignments after being assigned the Synapse Administrator role.
2222
>- To help you regain access to a workspace in the event that no Synapse Administrators are assigned or available to you, users with permissions to manage **Azure RBAC** role assignments on the workspace can also manage **Synapse RBAC** role assignments, allowing the addition of Synapse Administrator or other Synapse role assignments.
23-
>- Access to SQL pools is managed using SQL permissions. With the exception of the Synapse Administrator and Synapse SQL Administrator roles, Synapse RBAC roles do not grant access to SQL pools.
23+
>- Access to SQL pools is managed using SQL permissions. With the exception of the Synapse Administrator and Synapse SQL Administrator roles, Synapse RBAC roles do not grant access to SQL pools.
2424
2525
>[!important]
2626
>- Changes made to Synapse RBAC role assignments may take 2-5 minutes to take effect.
27-
>- If you are managing Synapse RBAC permissions by modifying membership of security groups, then changes to membership are managed using Microsoft Entra ID. Changes to group memberships may take 10-15 minutes or longer to take effect.
27+
>- If you are managing Synapse RBAC permissions by modifying membership of security groups, then changes to membership are managed using Microsoft Entra ID. Changes to group memberships may take 10-15 minutes or longer to take effect.
2828
2929
## Open Synapse Studio
3030

3131
To assign a role to a user, group, service principal, or managed identity, first [open the Synapse Studio](https://web.azuresynapse.net/) and log into your workspace.
3232

33-
![Log in to workspace](./media/common/login-workspace.png)
34-
35-
Once you've opened your workspace, expand the **Security** section on the left and select **Access control**.
33+
![Log in to workspace](./media/common/login-workspace.png)
34+
35+
In your workspace, expand the **Security** section on the left and select **Access control**.
3636

3737
![Select Access Control in Security section on left](./media/how-to-manage-synapse-rbac-role-assignments/left-nav-security-access-control.png)
3838

39-
The Access control screen lists current role assignments. You can filter the list by principal name or email, and selectively filter the object types, roles, or scopes included. From this screen, you can add or remove role assignments.
39+
The Access control screen lists current role assignments. You can filter the list by principal name or email, and selectively filter the object types, roles, or scopes included. From this screen, you can add or remove role assignments.
4040

4141
## Add a Synapse role assignment
4242

@@ -48,32 +48,32 @@ On the Add role assignment tab, you can create role assignments at workspace sco
4848

4949
## Add workspace-scoped role assignment
5050

51-
First, select **Workspace** as the scope, then select the **Synapse RBAC role**. Select the **principal(s)** to be assigned the role, then create the role assignment(s).
51+
First, select **Workspace** as the scope, then select the **Synapse RBAC role**. Select the **principal(s)** to be assigned the role, then create the role assignment(s).
5252

5353
![Add workspace role assignment - select role](./media/how-to-manage-synapse-rbac-role-assignments/access-control-workspace-role-assignment.png)
5454

5555
The assigned role will apply for all applicable objects in the workspace.
5656

5757
## Add workspace item-scoped role assignment
5858

59-
To assign a role at a finer-grained scope, select **Workspace item** as the scope, then select the scoping **Item type**.
59+
To assign a role at a finer-grained scope, select **Workspace item** as the scope, then select the scoping **Item type**.
6060

6161
![Add workspace item role assignment - select item type](./media/how-to-manage-synapse-rbac-role-assignments/access-control-add-workspace-item-assignment-select-item-type.png)
6262

63-
Select the specific **item** to be used as the scope, then select the **role** to be assigned from the drop-down. The drop-down lists only those roles that are valid for the selected item type. [Learn more](./synapse-workspace-synapse-rbac.md).
63+
Select the specific **item** to be used as the scope, then select the **role** to be assigned from the drop-down. The drop-down lists only those roles that are valid for the selected item type. [Learn more](./synapse-workspace-synapse-rbac.md).
6464

6565
![Add workspace item role assignment - select role](./media/how-to-manage-synapse-rbac-role-assignments/access-control-add-workspace-item-assignment-select-role.png)
6666

67-
Then **select the principal(s)** to which the role is to be assigned. You can iteratively select multiple principals. Select **Apply** to create the role assignment(s).
67+
Then **select the principal(s)** to which the role is to be assigned. You can iteratively select multiple principals. Select **Apply** to create the role assignment(s).
6868

6969
## Remove a Synapse RBAC role assignment
7070

71-
To revoke Synapse RBAC access, you remove the appropriate role assignments. On the Access control screen, use the filters to locate the role assignment(s) to be removed. Check the role assignments and then select **Remove access**.
71+
To revoke Synapse RBAC access, you remove the appropriate role assignments. On the Access control screen, use the filters to locate the role assignment(s) to be removed. Check the role assignments and then select **Remove access**.
7272

7373
![Delete a role assignment to remove access](./media/how-to-manage-synapse-rbac-role-assignments/access-control-remove-access.png)
7474

75-
Remember that changes to role assignments will take 2-5 minutes to take effect.
75+
Remember that changes to role assignments will take 2-5 minutes to take effect.
7676

77-
## Next steps
77+
## Related content
7878

79-
[Understand the Synapse RBAC roles required to perform common tasks](./synapse-workspace-understand-what-role-you-need.md)
79+
[Understand the Synapse RBAC roles required to perform common tasks](./synapse-workspace-understand-what-role-you-need.md).
-9.15 KB
Loading
Loading

0 commit comments

Comments
 (0)