Skip to content

Commit 9dc8cb5

Browse files
committed
updates to concept guide
1 parent f1c12b3 commit 9dc8cb5

File tree

2 files changed

+20
-16
lines changed

2 files changed

+20
-16
lines changed

articles/purview/concept-policies-devops.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ Bob and Alice are involved with the DevOps process at their company. Given their
4848
- Mateo doesn't have to create local logins in each SQL server.
4949
- The policies from Microsoft Purview improve security by limiting local privileged access. They support the Principle of Least Privilege (PoLP). In the scenario, Mateo only grants the minimum access necessary that Bob and Alice need to perform the task of monitoring system health and performance.
5050
- When new SQL servers are added to the resource group, Mateo doesn't need to update the policy in Microsoft Purview for it to be enforced on the new SQL servers.
51-
- If Alice or Bob leave their job and get backfilled, Mateo just updates the Azure AD group, without having to make any changes to the servers or to the policies he created in Microsoft Purview.
51+
- If Alice or Bob leaves their job and get backfilled, Mateo just updates the Azure AD group, without having to make any changes to the servers or to the policies he created in Microsoft Purview.
5252
- At any point in time, Mateo or the company’s auditor can see all the permissions that were granted directly in Microsoft Purview Studio.
5353

5454
| **Principle** | **Benefit** |

articles/purview/overview.md

Lines changed: 19 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.author: whhender
66
ms.service: purview
77
ms.custom: event-tier1-build-2022
88
ms.topic: overview
9-
ms.date: 11/23/2022
9+
ms.date: 03/04/2023
1010
---
1111

1212
# What's available in the Microsoft Purview governance portal?
@@ -35,9 +35,10 @@ Atop the Data Map, there are purpose-built apps that create environments for dat
3535
|App |Description |
3636
|----------|-----------|
3737
|[Data Catalog](#data-catalog-app) | Finds trusted data sources by browsing and searching your data assets. The data catalog aligns your assets with friendly business terms and data classification to identify data sources. |
38-
|[Data Estate Insights](#data-estate-insights-app) | Gives you an overview of your data estate to help you discover what kinds of data you have and where. |
38+
|[Data Estate Insights](#data-estate-insights-app) | Gives you an overview of your data estate to help you discover what kinds of data you have and where it is. |
3939
|[Data Sharing](#data-sharing-app) | Allows you to securely share data internally or cross organizations with business partners and customers. |
4040
|[Data Policy](#data-policy-app) | A set of central, cloud-based experiences that help you provision access to data securely and at scale. |
41+
|||
4142

4243
## Data Catalog app
4344

@@ -72,6 +73,21 @@ For more information, see our introductory guides:
7273
* [Self-service access policies](concept-self-service-data-access-policy.md) (preview): Self-Service: Workflow approval and automatic provisioning of access requests initiated by business analysts that discover data assets in Microsoft Purview’s catalog.
7374
* [DevOps policies](concept-policies-devops.md): Provision IT operations personnel access to SQL system metadata, so that they can monitor performance, health and audit security, while limiting the insider threat.
7475

76+
Here are the benefits of the Data Policy app:
77+
78+
| **Principle** | **Benefit** |
79+
|-|-|
80+
|*Simplify* |Permissions are bundled into role definitions that are abstracted and consistent across data source types, like Read and Modify.|
81+
| |Reduce the need of permission expertise for each data source type.|
82+
|||
83+
|*Reduce effort* |Graphical interface lets you navigate the data object hierarchy quickly.|
84+
| |Supports policies on entire Azure resource groups and subscriptions.|
85+
|||
86+
|*Enhance security*|Access is granted centrally and can be easily reviewed and revoked.|
87+
| |Reduces the need for privileged accounts to configure access directly at the data source.|
88+
| |Supports the Principle of Least Privilege via data resource scopes and common role definitions.|
89+
|||
90+
7591
## Traditional challenges that Microsoft Purview seeks to address
7692

7793
### Challenges for data consumers
@@ -115,19 +131,7 @@ Discovering and understanding data sources and their use is the primary purpose
115131

116132
At the same time, users can contribute to the catalog by tagging, documenting, and annotating data sources that have already been registered. They can also register new data sources, which are then discovered, understood, and consumed by the community of catalog users.
117133

118-
Lastly, Microsoft Purview Data Policy app provides a superior solution to keep your data secure. Here are the benefits of the Data Policy app:
119-
| **Principle** | **Benefit** |
120-
|-|-|
121-
|*Simplify* |Permissions are bundled into role definitions that are abstracted and consistent across data source types, like Read and Modify.|
122-
| |Reduce the need of permission expertise for each data source type.|
123-
|||
124-
|*Reduce effort* |Graphical interface lets you navigate the data object hierarchy quickly.|
125-
| |Supports policies on entire Azure resource groups and subscriptions.|
126-
|||
127-
|*Enhance security*|Access is granted centrally and can be easily reviewed and revoked.|
128-
| |Reduces the need for privileged accounts to configure access directly at the data source.|
129-
| |Supports the Principle of Least Privilege via data resource scopes and common role definitions.|
130-
|||
134+
Lastly, Microsoft Purview Data Policy app provides a superior solution to keep your data secure.
131135

132136
## In-region data residency
133137

0 commit comments

Comments
 (0)