Skip to content

Commit ac4e148

Browse files
committed
Updating permissions and portal page to reference direct link
1 parent 0103b8c commit ac4e148

File tree

2 files changed

+17
-13
lines changed

2 files changed

+17
-13
lines changed

articles/purview/catalog-permissions.md

Lines changed: 12 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,16 @@ The Microsoft Purview governance portal uses **Collections** in the Microsoft Pu
1717
> [!IMPORTANT]
1818
> This article refers to permissions required for the Microsoft Purview governance portal, and applications like the Microsoft Purview Data Map, Data Catalog, Data Estate Insights, etc. If you are looking for permissions information for the Microsoft Purview compliance center, follow [the article for permissions in the Microsoft Purview compliance portal](/microsoft-365/compliance/microsoft-365-compliance-center-permissions).
1919
20+
## Permissions to access the Microsoft Purview governance portal
21+
22+
There are two main ways to access the Microsoft Purview governance portal, and you'll need specific permissions for either:
23+
24+
- To access your Microsoft Purview governance portal directly at [https://web.purview.azure.com](https://web.purview.azure.com), you'll need at least a [reader role](#roles) on a collection in your Microsoft Purview Data Map.
25+
- To access your Microsoft Purview governance portal through the [Azure portal](https://portal.azure.com) by searching for your Microsoft Purview account, opening it, and selecting **Open Microsoft Purview governance portal**, you'll need at least a **Reader** role under **Access Control (IAM)**.
26+
27+
> [!NOTE]
28+
> If you created your account using a service principal, to be able to access the Microsoft Purview governance portal you will need to [grant a user collection admin permissions on the root collection](#administrator-change).
29+
2030
## Collections
2131

2232
A collection is a tool that the Microsoft Purview Data Map uses to group assets, sources, and other artifacts into a hierarchy for discoverability and to manage access control. All accesses to the Microsoft Purview governance portal's resources are managed from collections in the Microsoft Purview Data Map.
@@ -82,14 +92,7 @@ You can assign roles to users, security groups, and service principals from your
8292
After creating a Microsoft Purview (formerly Azure Purview) account, the first thing to do is create collections and assign users to roles within those collections.
8393

8494
> [!NOTE]
85-
> If you created your account using a service principal, to be able to access the Microsoft Purview governance portal and assign permissions to users, you will need to grant a user collection admin permissions on the root collection.
86-
> You can use [this Azure CLI command](/cli/azure/purview/account#az-purview-account-add-root-collection-admin):
87-
>
88-
> ```azurecli
89-
> az purview account add-root-collection-admin --account-name [Microsoft Purview Account Name] --resource-group [Resource Group Name] --object-id [User Object Id]
90-
> ```
91-
>
92-
> The object-id is optional. For more information and an example, see the [CLI command reference page](/cli/azure/purview/account#az-purview-account-add-root-collection-admin).
95+
> If you created your account using a service principal, to be able to access the Microsoft Purview governance portal and assign permissions to users, you will need to [grant a user collection admin permissions on the root collection](#administrator-change).
9396
9497
### Create collections
9598

@@ -122,7 +125,7 @@ For full instructions, see our [how-to guide for adding role assignments](how-to
122125

123126
## Administrator change
124127

125-
There may be a time when your [root collection admin](#roles) needs to change. By default, the user who creates the account is automatically assigned collection admin to the root collection. To update the root collection admin, there are four options:
128+
There may be a time when your [root collection admin](#roles) needs to change, or an admin needs to be added after an account is created by an application. By default, the user who creates the account is automatically assigned collection admin to the root collection. To update the root collection admin, there are four options:
126129

127130
- You can manage root collection administrators in the [Azure portal](https://portal.azure.com/):
128131
1. Sign in to the Azure portal and search for your Microsoft Purview account.

articles/purview/use-microsoft-purview-governance-portal.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -14,15 +14,16 @@ This article gives an overview of some of the main features of Microsoft Purview
1414

1515
## Prerequisites
1616

17-
* An Active Microsoft Purview account is already created in Azure portal and the user has permissions to access [the Microsoft Purview governance portal](https://web.purview.azure.com/resource/).
17+
* An Active Microsoft Purview account is already created in Azure portal
18+
* The user has permissions to access [the Microsoft Purview governance portal](https://web.purview.azure.com/resource/).
1819

1920
## Launch Microsoft Purview account
2021

21-
* To launch your Microsoft Purview account, go to Microsoft Purview accounts in Azure portal, select the account you want to launch and launch the account.
22+
* You can launch the Microsoft Purview account directly by going to `https://web.purview.azure.com`, selecting **Azure Active Directory** and the account name. Or by going to `https://web.purview.azure.com/resource/yourpurviewaccountname`
2223

23-
:::image type="content" source="./media/use-purview-studio/open-purview-studio.png" alt-text="Screenshot of Microsoft Purview window in Azure portal, with the Microsoft Purview governance portal button highlighted." border="true":::
24+
* To launch your Microsoft Purview account from the [Azure portal](https://portal.azure.com), go to Microsoft Purview accounts in Azure portal, select the account you want to launch and launch the account.
2425

25-
* Another way to launch Microsoft Purview account is to go to `https://web.purview.azure.com`, select **Azure Active Directory** and an account name to launch the account.
26+
:::image type="content" source="./media/use-purview-studio/open-purview-studio.png" alt-text="Screenshot of Microsoft Purview window in Azure portal, with the Microsoft Purview governance portal button highlighted." border="true":::
2627

2728
## Home page
2829

0 commit comments

Comments
 (0)