You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/purview/concept-policies-devops.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -48,7 +48,7 @@ Bob and Alice are involved with the DevOps process at their company. Given their
48
48
- Mateo doesn't have to create local logins in each SQL server.
49
49
- The policies from Microsoft Purview improve security by limiting local privileged access. They support the Principle of Least Privilege (PoLP). In the scenario, Mateo only grants the minimum access necessary that Bob and Alice need to perform the task of monitoring system health and performance.
50
50
- When new SQL servers are added to the resource group, Mateo doesn't need to update the policy in Microsoft Purview for it to be enforced on the new SQL servers.
51
-
- If Alice or Bob leave their job and get backfilled, Mateo just updates the Azure AD group, without having to make any changes to the servers or to the policies he created in Microsoft Purview.
51
+
- If Alice or Bob leaves their job and get backfilled, Mateo just updates the Azure AD group, without having to make any changes to the servers or to the policies he created in Microsoft Purview.
52
52
- At any point in time, Mateo or the company’s auditor can see all the permissions that were granted directly in Microsoft Purview Studio.
Copy file name to clipboardExpand all lines: articles/purview/overview.md
+19-15Lines changed: 19 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,7 +6,7 @@ ms.author: whhender
6
6
ms.service: purview
7
7
ms.custom: event-tier1-build-2022
8
8
ms.topic: overview
9
-
ms.date: 11/23/2022
9
+
ms.date: 03/04/2023
10
10
---
11
11
12
12
# What's available in the Microsoft Purview governance portal?
@@ -35,9 +35,10 @@ Atop the Data Map, there are purpose-built apps that create environments for dat
35
35
|App |Description |
36
36
|----------|-----------|
37
37
|[Data Catalog](#data-catalog-app)| Finds trusted data sources by browsing and searching your data assets. The data catalog aligns your assets with friendly business terms and data classification to identify data sources. |
38
-
|[Data Estate Insights](#data-estate-insights-app)| Gives you an overview of your data estate to help you discover what kinds of data you have and where. |
38
+
|[Data Estate Insights](#data-estate-insights-app)| Gives you an overview of your data estate to help you discover what kinds of data you have and where it is. |
39
39
|[Data Sharing](#data-sharing-app)| Allows you to securely share data internally or cross organizations with business partners and customers. |
40
40
|[Data Policy](#data-policy-app)| A set of central, cloud-based experiences that help you provision access to data securely and at scale. |
41
+
|||
41
42
42
43
## Data Catalog app
43
44
@@ -72,6 +73,21 @@ For more information, see our introductory guides:
72
73
*[Self-service access policies](concept-self-service-data-access-policy.md) (preview): Self-Service: Workflow approval and automatic provisioning of access requests initiated by business analysts that discover data assets in Microsoft Purview’s catalog.
73
74
*[DevOps policies](concept-policies-devops.md): Provision IT operations personnel access to SQL system metadata, so that they can monitor performance, health and audit security, while limiting the insider threat.
74
75
76
+
Here are the benefits of the Data Policy app:
77
+
78
+
|**Principle**|**Benefit**|
79
+
|-|-|
80
+
|*Simplify*|Permissions are bundled into role definitions that are abstracted and consistent across data source types, like Read and Modify.|
81
+
||Reduce the need of permission expertise for each data source type.|
82
+
|||
83
+
|*Reduce effort*|Graphical interface lets you navigate the data object hierarchy quickly.|
84
+
||Supports policies on entire Azure resource groups and subscriptions.|
85
+
|||
86
+
|*Enhance security*|Access is granted centrally and can be easily reviewed and revoked.|
87
+
||Reduces the need for privileged accounts to configure access directly at the data source.|
88
+
||Supports the Principle of Least Privilege via data resource scopes and common role definitions.|
89
+
|||
90
+
75
91
## Traditional challenges that Microsoft Purview seeks to address
76
92
77
93
### Challenges for data consumers
@@ -115,19 +131,7 @@ Discovering and understanding data sources and their use is the primary purpose
115
131
116
132
At the same time, users can contribute to the catalog by tagging, documenting, and annotating data sources that have already been registered. They can also register new data sources, which are then discovered, understood, and consumed by the community of catalog users.
117
133
118
-
Lastly, Microsoft Purview Data Policy app provides a superior solution to keep your data secure. Here are the benefits of the Data Policy app:
119
-
|**Principle**|**Benefit**|
120
-
|-|-|
121
-
|*Simplify*|Permissions are bundled into role definitions that are abstracted and consistent across data source types, like Read and Modify.|
122
-
||Reduce the need of permission expertise for each data source type.|
123
-
|||
124
-
|*Reduce effort*|Graphical interface lets you navigate the data object hierarchy quickly.|
125
-
||Supports policies on entire Azure resource groups and subscriptions.|
126
-
|||
127
-
|*Enhance security*|Access is granted centrally and can be easily reviewed and revoked.|
128
-
||Reduces the need for privileged accounts to configure access directly at the data source.|
129
-
||Supports the Principle of Least Privilege via data resource scopes and common role definitions.|
130
-
|||
134
+
Lastly, Microsoft Purview Data Policy app provides a superior solution to keep your data secure.
0 commit comments