Skip to content

Commit b24e8e9

Browse files
Merge pull request #219642 from inward-eye/main
change name for Arc-SQL data source
2 parents 0b2922c + 533343c commit b24e8e9

10 files changed

+28
-28
lines changed

articles/purview/concept-policies-devops.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,7 @@ Bob and Alice are DevOps users at their company. Given their role, they need to
5757

5858
## Next steps
5959
To get started with DevOps policies, consult the following guides:
60-
* Doc: [Microsoft Purview DevOps policies on Arc-enabled SQL Server](./how-to-policies-devops-arc-sql-server.md)
60+
* Doc: [Microsoft Purview DevOps policies on Azure Arc-enabled SQL Server](./how-to-policies-devops-arc-sql-server.md)
6161
* Doc: [Microsoft Purview DevOps policies on Azure SQL DB](./how-to-policies-devops-azure-sql-db.md)
6262
* Doc: [Microsoft Purview DevOps policies on resource groups and subscriptions](./how-to-policies-devops-resource-group.md)
6363
* Blog: [New granular permissions for SQL Server 2022 and Azure SQL to help PoLP](https://techcommunity.microsoft.com/t5/sql-server-blog/new-granular-permissions-for-sql-server-2022-and-azure-sql-to/ba-p/3607507)

articles/purview/how-to-policies-data-owner-arc-sql-server.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Provision access by data owner for SQL Server on Azure Arc-enabled servers (preview)
3-
description: Step-by-step guide on how data owners can configure access to Arc-enabled SQL servers through Microsoft Purview access policies.
2+
title: Provision access by data owner for Azure Arc-enabled SQL Server (preview)
3+
description: Step-by-step guide on how data owners can configure access to Azure Arc-enabled SQL Servers through Microsoft Purview access policies.
44
author: inward-eye
55
ms.author: vlrodrig
66
ms.service: purview
@@ -9,13 +9,13 @@ ms.topic: how-to
99
ms.date: 11/23/2022
1010
ms.custom: references_regions, event-tier1-build-2022
1111
---
12-
# Provision access by data owner for SQL Server on Azure Arc-enabled servers (preview)
12+
# Provision access by data owner for Azure Arc-enabled SQL Server (preview)
1313

1414
[!INCLUDE [feature-in-preview](includes/feature-in-preview.md)]
1515

1616
[Data owner policies](concept-policies-data-owner.md) are a type of Microsoft Purview access policies. They allow you to manage access to user data in sources that have been registered for *Data Use Management* in Microsoft Purview. These policies can be authored directly in the Microsoft Purview governance portal, and after publishing, they get enforced by the data source.
1717

18-
This guide covers how a data owner can delegate authoring policies in Microsoft Purview to enable access to SQL Server on Azure Arc-enabled servers. The following actions are currently enabled: *Read*. This action is only supported for policies at server level. *Modify* is not supported at this point.
18+
This guide covers how a data owner can delegate authoring policies in Microsoft Purview to enable access to Azure Arc-enabled SQL Server. The following actions are currently enabled: *Read*. This action is only supported for policies at server level. *Modify* is not supported at this point.
1919

2020
## Prerequisites
2121
[!INCLUDE [Access policies generic pre-requisites](./includes/access-policies-prerequisites-generic.md)]
@@ -40,14 +40,14 @@ Register each data source with Microsoft Purview to later define access policies
4040

4141
1. Enable Data Use Management. Data Use Management needs certain permissions and can affect the security of your data, as it delegates to certain Microsoft Purview roles to manage access to the data sources. **Go through the secure practices related to Data Use Management in this guide**: [How to enable Data Use Management](./how-to-enable-data-use-management.md)
4242

43-
1. Upon enabling Data Use Management, Microsoft Purview will automatically capture the **Application ID** of the App Registration related to this Arc-enabled SQL server if one has been configured. Come back to this screen and hit the refresh button on the side of it to refresh, in case the association between the Arc-enabled SQL server and the App Registration changes in the future.
43+
1. Upon enabling Data Use Management, Microsoft Purview will automatically capture the **Application ID** of the App Registration related to this Azure Arc-enabled SQL Server if one has been configured. Come back to this screen and hit the refresh button on the side of it to refresh, in case the association between the Azure Arc-enabled SQL Server and the App Registration changes in the future.
4444

4545
1. Select **Register** or **Apply** at the bottom
4646

4747
Once your data source has the **Data Use Management** toggle *Enabled*, it will look like this picture.
4848
![Screenshot shows how to register a data source for policy.](./media/how-to-policies-data-owner-sql/register-data-source-for-policy-arc-sql.png)
4949

50-
## Enable policies in Arc-enabled SQL Server
50+
## Enable policies in Azure Arc-enabled SQL Server
5151
[!INCLUDE [Access policies Arc enabled SQL Server configuration](./includes/access-policies-configuration-arc-sql-server.md)]
5252

5353
## Create and publish a Data owner policy
@@ -116,7 +116,7 @@ SELECT * FROM sys.dm_server_external_policy_principal_assigned_actions
116116

117117
### Policy action mapping
118118

119-
This section contains a reference of how actions in Microsoft Purview data policies map to specific actions in SQL Server on Azure Arc-enabled servers.
119+
This section contains a reference of how actions in Microsoft Purview data policies map to specific actions in Azure Arc-enabled SQL Server.
120120

121121
| **Microsoft Purview policy action** | **Data source specific actions** |
122122
|-------------------------------------|--------------------------------------|

articles/purview/how-to-policies-data-owner-azure-sql-db.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -111,4 +111,4 @@ This section contains a reference of how actions in Microsoft Purview data polic
111111
Check blog, demo and related how-to guides
112112
* [Concepts for Microsoft Purview data owner policies](./concept-policies-data-owner.md)
113113
* [Enable Microsoft Purview data owner policies on all data sources in a subscription or a resource group](./how-to-policies-data-owner-resource-group.md)
114-
* [Enable Microsoft Purview data owner policies on an Arc-enabled SQL Server](./how-to-policies-data-owner-arc-sql-server.md)
114+
* [Enable Microsoft Purview data owner policies on an Azure Arc-enabled SQL Server](./how-to-policies-data-owner-arc-sql-server.md)

articles/purview/how-to-policies-data-owner-resource-group.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ In this guide we cover how to register an entire resource group or subscription
2323
**Only these data sources are enabled for access policies on resource group or subscription**. Follow the **Prerequisites** section that is specific to the data source(s) in these guides:
2424
* [Data owner policies on an Azure Storage account](./how-to-policies-data-owner-storage.md#prerequisites)
2525
* [Data owner policies on an Azure SQL Database](./how-to-policies-data-owner-azure-sql-db.md#prerequisites)(*)
26-
* [Data owner policies on an Arc-enabled SQL Server](./how-to-policies-data-owner-arc-sql-server.md#prerequisites)(*)
26+
* [Data owner policies on an Azure Arc-enabled SQL Server](./how-to-policies-data-owner-arc-sql-server.md#prerequisites)(*)
2727

2828
(*) The *Modify* action is not currently supported for SQL-type data sources.
2929

@@ -42,7 +42,7 @@ In the end, your resource will have the **Data Use Management** toggle **Enable
4242
![Screenshot shows how to register a resource group or subscription for policy by toggling the enable tab in the resource editor.](./media/how-to-policies-data-owner-resource-group/register-resource-group-for-policy.png)
4343

4444
>[!Important]
45-
> - If you create a policy on a resource group or subscription and want to have it enforced in Arc-enabled SQL servers, you will need to also register those servers independently and enable *Data use management* which captures their App ID: [See this document](./how-to-policies-devops-arc-sql-server.md#register-data-sources-in-microsoft-purview).
45+
> - If you create a policy on a resource group or subscription and want to have it enforced in Azure Arc-enabled SQL Servers, you will need to also register those servers independently and enable *Data use management* which captures their App ID: [See this document](./how-to-policies-devops-arc-sql-server.md#register-data-sources-in-microsoft-purview).
4646
4747

4848
## Create and publish a data owner policy

articles/purview/how-to-policies-devops-arc-sql-server.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
2-
title: Provision access to Arc-enabled SQL Server for DevOps actions
3-
description: Step-by-step guide on provisioning access to Arc-enabled SQL Server through Microsoft Purview DevOps policies
2+
title: Provision access to Azure Arc-enabled SQL Server for DevOps actions
3+
description: Step-by-step guide on provisioning access to Azure Arc-enabled SQL Server through Microsoft Purview DevOps policies
44
author: inward-eye
55
ms.author: vlrodrig
66
ms.service: purview
@@ -9,11 +9,11 @@ ms.topic: how-to
99
ms.date: 11/16/2022
1010
ms.custom:
1111
---
12-
# Provision access to system metadata in Arc-enabled SQL Server
12+
# Provision access to system metadata in Azure Arc-enabled SQL Server
1313

1414
[DevOps policies](concept-policies-devops.md) are a type of Microsoft Purview access policies. They allow you to manage access to system metadata on data sources that have been registered for *Data use management* in Microsoft Purview. These policies are configured directly in the Microsoft Purview governance portal, and after being saved they get automatically published and then get enforced by the data source.
1515

16-
This how-to guide covers how to provision access from Microsoft Purview to Arc-enabled SQL Server system metadata (DMVs and DMFs) *SQL Performance Monitoring* or *SQL Security Auditing* actions. Microsoft Purview access policies apply to Azure AD Accounts only.
16+
This how-to guide covers how to provision access from Microsoft Purview to Azure Arc-enabled SQL Server system metadata (DMVs and DMFs) *SQL Performance Monitoring* or *SQL Security Auditing* actions. Microsoft Purview access policies apply to Azure AD Accounts only.
1717

1818
## Prerequisites
1919
[!INCLUDE [Access policies generic pre-requisites](./includes/access-policies-prerequisites-generic.md)]
@@ -23,7 +23,7 @@ This how-to guide covers how to provision access from Microsoft Purview to Arc-e
2323
[!INCLUDE [Access policies generic configuration](./includes/access-policies-configuration-generic.md)]
2424

2525
### Register data sources in Microsoft Purview
26-
The Arc-enabled SQL Server data source needs to be registered first with Microsoft Purview, before policies can be created.
26+
The Azure Arc-enabled SQL Server data source needs to be registered first with Microsoft Purview, before policies can be created.
2727

2828
1. Sign in to Microsoft Purview Studio.
2929

@@ -38,14 +38,14 @@ The Arc-enabled SQL Server data source needs to be registered first with Microso
3838

3939
1. Enable Data Use Management. Data Use Management needs certain permissions and can affect the security of your data, as it delegates to certain Microsoft Purview roles to manage access to the data sources. **Go through the secure practices related to Data Use Management in this guide**: [How to enable Data Use Management](./how-to-enable-data-use-management.md)
4040

41-
1. Upon enabling Data Use Management, Microsoft Purview will automatically capture the **Application ID** of the App Registration related to this Arc-enabled SQL server if one has been configured. Come back to this screen and hit the refresh button on the side of it to refresh, in case the association between the Arc-enabled SQL server and the App Registration changes in the future.
41+
1. Upon enabling Data Use Management, Microsoft Purview will automatically capture the **Application ID** of the App Registration related to this Azure Arc-enabled SQL Server if one has been configured. Come back to this screen and hit the refresh button on the side of it to refresh, in case the association between the Azure Arc-enabled SQL Server and the App Registration changes in the future.
4242

4343
1. Select **Register** or **Apply** at the bottom
4444

4545
Once your data source has the **Data Use Management** toggle *Enabled*, it will look like this picture.
4646
![Screenshot shows how to register a data source for policy.](./media/how-to-policies-data-owner-sql/register-data-source-for-policy-arc-sql.png)
4747

48-
## Enable policies in Arc-enabled SQL Server
48+
## Enable policies in Azure Arc-enabled SQL Server
4949
[!INCLUDE [Access policies Arc enabled SQL Server configuration](./includes/access-policies-configuration-arc-sql-server.md)]
5050

5151
## Create a new DevOps policy
@@ -103,7 +103,7 @@ SELECT * FROM sys.dm_server_external_policy_principal_assigned_actions
103103

104104
### Policy action mapping
105105

106-
This section contains a reference of how actions in Microsoft Purview data policies map to specific actions in SQL Server on Azure Arc-enabled servers.
106+
This section contains a reference of how actions in Microsoft Purview data policies map to specific actions in Azure Arc-enabled SQL Server.
107107

108108
| **Microsoft Purview policy action** | **Data source specific actions** |
109109
|-------------------------------------|--------------------------------------|

articles/purview/how-to-policies-devops-authoring-generic.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -85,5 +85,5 @@ Check the blog, related videos and documents
8585
* Video: [Pre-requisite for policies: The "Data use management" option](https://youtu.be/v_lOzevLW-Q)
8686
* Video: [Microsoft Purview DevOps policies on data sources and resource groups](https://youtu.be/YCDJagrgEAI)
8787
* Video: [Reduce the effort with Microsoft Purview DevOps policies on resource groups](https://youtu.be/yMMXCeIFCZ8)
88-
* Document: [Microsoft Purview DevOps policies on Arc-enabled SQL Server](./how-to-policies-devops-arc-sql-server.md)
88+
* Document: [Microsoft Purview DevOps policies on Azure Arc-enabled SQL Server](./how-to-policies-devops-arc-sql-server.md)
8989
* Document: [Microsoft Purview DevOps policies on Azure SQL DB](./how-to-policies-devops-azure-sql-db.md)

articles/purview/how-to-policies-devops-azure-sql-db.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -112,7 +112,7 @@ Check the blog and related docs
112112
* Video: [Pre-requisite for policies: The "Data use management" option](https://youtu.be/v_lOzevLW-Q)
113113
* Video: [Microsoft Purview DevOps policies on data sources and resource groups](https://youtu.be/YCDJagrgEAI)
114114
* Video: [Reduce the effort with Microsoft Purview DevOps policies on resource groups](https://youtu.be/yMMXCeIFCZ8)
115-
* Doc: [Microsoft Purview DevOps policies on Arc-enabled SQL Server](./how-to-policies-devops-arc-sql-server.md)
115+
* Doc: [Microsoft Purview DevOps policies on Azure Arc-enabled SQL Server](./how-to-policies-devops-arc-sql-server.md)
116116
* Doc: [Microsoft Purview DevOps policies on resource groups and subscriptions](./how-to-policies-devops-resource-group.md)
117117

118118

articles/purview/how-to-policies-devops-resource-group.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ In this guide we cover how to register an entire resource group or subscription
2020

2121
**Only these data sources are enabled for access policies on resource group or subscription**. Follow the **Prerequisites** section that is specific to the data source(s) in these guides:
2222
* [DevOps policies on an Azure SQL Database](./how-to-policies-devops-azure-sql-db.md#prerequisites)
23-
* [DevOps policies on an Arc-enabled SQL Server](./how-to-policies-devops-arc-sql-server.md#prerequisites)
23+
* [DevOps policies on an Azure Arc-enabled SQL Server](./how-to-policies-devops-arc-sql-server.md#prerequisites)
2424

2525
## Microsoft Purview Configuration
2626
[!INCLUDE [Access policies generic configuration](./includes/access-policies-configuration-generic.md)]
@@ -37,7 +37,7 @@ In the end, your resource will have the **Data Use Management** toggle **Enable
3737
![Screenshot shows how to register a resource group or subscription for policy by toggling the enable tab in the resource editor.](./media/how-to-policies-data-owner-resource-group/register-resource-group-for-policy.png)
3838

3939
>[!Important]
40-
> - If you create a policy on a resource group or subscription and want to have it enforced in Arc-enabled SQL servers, you will need to also register those servers independently and enable *Data use management* which captures their App ID: [See this document](./how-to-policies-devops-arc-sql-server.md#register-data-sources-in-microsoft-purview).
40+
> - If you create a policy on a resource group or subscription and want to have it enforced in Azure Arc-enabled SQL Servers, you will need to also register those servers independently and enable *Data use management* which captures their App ID: [See this document](./how-to-policies-devops-arc-sql-server.md#register-data-sources-in-microsoft-purview).
4141
4242

4343
## Create a new DevOps policy
@@ -60,5 +60,5 @@ To test the policy see the DevOps policy guides for the underlying data sources
6060
Check the blog and related docs
6161
* Blog: [Microsoft Purview DevOps policies enable at scale access provisioning for IT operations](https://techcommunity.microsoft.com/t5/microsoft-purview-blog/microsoft-purview-devops-policies-enable-at-scale-access/ba-p/3604725)
6262
* Video: [Reduce the effort with Microsoft Purview DevOps policies on resource groups](https://youtu.be/yMMXCeIFCZ8)
63-
* Doc: [Microsoft Purview DevOps policies on Arc-enabled SQL Server](./how-to-policies-devops-arc-sql-server.md)
63+
* Doc: [Microsoft Purview DevOps policies on Azure Arc-enabled SQL Server](./how-to-policies-devops-arc-sql-server.md)
6464
* Doc: [Microsoft Purview DevOps policies on Azure SQL DB](./how-to-policies-devops-azure-sql-db.md)

articles/purview/includes/access-policies-prerequisites-arc-sql-server.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ Policy enforcement is available in only the following regions for Microsoft Purv
3636
- Japan East
3737
- Australia East
3838

39-
#### Security considerations for SQL Server on Azure Arc-enabled servers
39+
#### Security considerations for Azure Arc-enabled SQL Server
4040

4141
- The server admin can turn off the Microsoft Purview policy enforcement.
4242
- Azure Arc admin and server admin permissions provide the ability to change the Azure Resource Manager path of the server. Because mappings in Microsoft Purview use Resource Manager paths, this can lead to wrong policy enforcements.

articles/purview/register-scan-azure-arc-enabled-sql-server.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -121,7 +121,7 @@ The account must have access to the master database, because `sys.databases` is
121121

122122
1. Select **Register**.
123123

124-
1. Select **SQL Server on Azure Arc-enabled servers**, and then select **Continue**.
124+
1. Select **Azure Arc-enabled SQL Server**, and then select **Continue**.
125125

126126
:::image type="content" source="media/register-scan-azure-arc-enabled-sql-server/set-up-azure-arc-enabled-sql-data-source.png" alt-text="Screenshot that shows selecting a SQL data source.":::
127127

@@ -196,13 +196,13 @@ Before you can create policies, you must register the Azure Arc-enabled SQL Serv
196196

197197
1. Enable **Data use management**. **Data use management** needs certain permissions and can affect the security of your data, because it delegates to certain Microsoft Purview roles to manage access to the data sources. Go through the secure practices related to **Data use management** in this guide: [Enable Data use management on your Microsoft Purview sources](./how-to-enable-data-use-management.md).
198198

199-
1. Upon enabling Data Use Management, Microsoft Purview will automatically capture the **Application ID** of the App Registration related to this Arc-enabled SQL server if one has been configured. Come back to this screen and hit the refresh button on the side of it to refresh, in case the association between the Arc-enabled SQL server and the App Registration changes in the future.
199+
1. Upon enabling Data Use Management, Microsoft Purview will automatically capture the **Application ID** of the App Registration related to this Azure Arc-enabled SQL Server if one has been configured. Come back to this screen and hit the refresh button on the side of it to refresh, in case the association between the Azure Arc-enabled SQL Server and the App Registration changes in the future.
200200

201201
1. Select **Register** or **Apply**.
202202

203203
![Screenshot that shows selections for registering a data source for a policy.](./media/how-to-policies-data-owner-sql/register-data-source-for-policy-arc-sql.png)
204204

205-
### Enable policies in Arc-enabled SQL Server
205+
### Enable policies in Azure Arc-enabled SQL Server
206206
[!INCLUDE [Access policies Arc enabled SQL Server configuration](./includes/access-policies-configuration-arc-sql-server.md)]
207207

208208
### Create a policy

0 commit comments

Comments
 (0)