You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/purview/catalog-permissions.md
+12-9Lines changed: 12 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -17,6 +17,16 @@ The Microsoft Purview governance portal uses **Collections** in the Microsoft Pu
17
17
> [!IMPORTANT]
18
18
> This article refers to permissions required for the Microsoft Purview governance portal, and applications like the Microsoft Purview Data Map, Data Catalog, Data Estate Insights, etc. If you are looking for permissions information for the Microsoft Purview compliance center, follow [the article for permissions in the Microsoft Purview compliance portal](/microsoft-365/compliance/microsoft-365-compliance-center-permissions).
19
19
20
+
## Permissions to access the Microsoft Purview governance portal
21
+
22
+
There are two main ways to access the Microsoft Purview governance portal, and you'll need specific permissions for either:
23
+
24
+
- To access your Microsoft Purview governance portal directly at [https://web.purview.azure.com](https://web.purview.azure.com), you'll need at least a [reader role](#roles) on a collection in your Microsoft Purview Data Map.
25
+
- To access your Microsoft Purview governance portal through the [Azure portal](https://portal.azure.com) by searching for your Microsoft Purview account, opening it, and selecting **Open Microsoft Purview governance portal**, you'll need at least a **Reader** role under **Access Control (IAM)**.
26
+
27
+
> [!NOTE]
28
+
> If you created your account using a service principal, to be able to access the Microsoft Purview governance portal you will need to [grant a user collection admin permissions on the root collection](#administrator-change).
29
+
20
30
## Collections
21
31
22
32
A collection is a tool that the Microsoft Purview Data Map uses to group assets, sources, and other artifacts into a hierarchy for discoverability and to manage access control. All accesses to the Microsoft Purview governance portal's resources are managed from collections in the Microsoft Purview Data Map.
@@ -82,14 +92,7 @@ You can assign roles to users, security groups, and service principals from your
82
92
After creating a Microsoft Purview (formerly Azure Purview) account, the first thing to do is create collections and assign users to roles within those collections.
83
93
84
94
> [!NOTE]
85
-
> If you created your account using a service principal, to be able to access the Microsoft Purview governance portal and assign permissions to users, you will need to grant a user collection admin permissions on the root collection.
86
-
> You can use [this Azure CLI command](/cli/azure/purview/account#az-purview-account-add-root-collection-admin):
87
-
>
88
-
> ```azurecli
89
-
> az purview account add-root-collection-admin --account-name [Microsoft Purview Account Name] --resource-group [Resource Group Name] --object-id [User Object Id]
90
-
> ```
91
-
>
92
-
> The object-id is optional. For more information and an example, see the [CLI command reference page](/cli/azure/purview/account#az-purview-account-add-root-collection-admin).
95
+
> If you created your account using a service principal, to be able to access the Microsoft Purview governance portal and assign permissions to users, you will need to [grant a user collection admin permissions on the root collection](#administrator-change).
93
96
94
97
### Create collections
95
98
@@ -122,7 +125,7 @@ For full instructions, see our [how-to guide for adding role assignments](how-to
122
125
123
126
## Administrator change
124
127
125
-
There may be a time when your [root collection admin](#roles) needs to change. By default, the user who creates the account is automatically assigned collection admin to the root collection. To update the root collection admin, there are four options:
128
+
There may be a time when your [root collection admin](#roles) needs to change, or an admin needs to be added after an account is created by an application. By default, the user who creates the account is automatically assigned collection admin to the root collection. To update the root collection admin, there are four options:
126
129
127
130
- You can manage root collection administrators in the [Azure portal](https://portal.azure.com/):
128
131
1. Sign in to the Azure portal and search for your Microsoft Purview account.
Copy file name to clipboardExpand all lines: articles/purview/use-microsoft-purview-governance-portal.md
+5-4Lines changed: 5 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,15 +14,16 @@ This article gives an overview of some of the main features of Microsoft Purview
14
14
15
15
## Prerequisites
16
16
17
-
* An Active Microsoft Purview account is already created in Azure portal and the user has permissions to access [the Microsoft Purview governance portal](https://web.purview.azure.com/resource/).
17
+
* An Active Microsoft Purview account is already created in Azure portal
18
+
* The user has permissions to access [the Microsoft Purview governance portal](https://web.purview.azure.com/resource/).
18
19
19
20
## Launch Microsoft Purview account
20
21
21
-
*To launch your Microsoft Purview account, go to Microsoft Purview accounts in Azure portal, select the account you want to launch and launch the account.
22
+
*You can launch the Microsoft Purview account directly by going to `https://web.purview.azure.com`, selecting **Azure Active Directory** and the account name. Or by going to `https://web.purview.azure.com/resource/yourpurviewaccountname`
22
23
23
-
:::image type="content" source="./media/use-purview-studio/open-purview-studio.png" alt-text="Screenshot of Microsoft Purview window in Azure portal, with the Microsoft Purview governance portal button highlighted." border="true":::
24
+
* To launch your Microsoft Purview account from the [Azure portal](https://portal.azure.com), go to Microsoft Purview accounts in Azure portal, select the account you want to launch and launch the account.
24
25
25
-
* Another way to launch Microsoft Purview account is to go to `https://web.purview.azure.com`, select **Azure Active Directory** and an account name to launch the account.
26
+
:::image type="content" source="./media/use-purview-studio/open-purview-studio.png" alt-text="Screenshot of Microsoft Purview window in Azure portal, with the Microsoft Purview governance portal button highlighted." border="true":::
0 commit comments