You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/data-catalog/data-catalog-how-to-big-data.md
+6-6Lines changed: 6 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,19 +1,19 @@
1
1
---
2
2
title: How to catalog big data in Azure Data Catalog
3
3
description: How-to article highlighting patterns for using Azure Data Catalog with 'big data' data sources, including Azure Blob Storage, Azure Data Lake, and Hadoop HDFS.
**Microsoft Azure Data Catalog** is a fully managed cloud service that serves as a system of registration and system of discovery for enterprise data sources. It is all about helping people discover, understand, and use data sources, and helping organizations to get more value from their existing data sources, including big data.
16
+
**Microsoft Azure Data Catalog** is a fully managed cloud service that serves as a system of registration and system of discovery for enterprise data sources. It's all about helping people discover, understand, and use data sources, and helping organizations to get more value from their existing data sources, including big data.
17
17
18
18
**Azure Data Catalog** supports the registration of Azure Storage blobs and directories as well as Hadoop HDFS files and directories. The semi-structured nature of these data sources provides great flexibility. However, to get the most value from registering them with **Azure Data Catalog**, users must consider how the data sources are organized.
19
19
@@ -40,7 +40,7 @@ An example of this pattern might be:
40
40
41
41
In this example, vehicle_maintenance_events and location_tracking_events represent logical data sets. Each of these folders contains data files that are organized by year and month into subfolders. Each of these folders could potentially contain hundreds or thousands of files.
42
42
43
-
In this pattern, registering individual files with **Azure Data Catalog** probably does not make sense. Instead, register the directories that represent the data sets that be meaningful to the users working with the data.
43
+
In this pattern, registering individual files with **Azure Data Catalog** probably doesn't make sense. Instead, register the directories that represent the data sets that be meaningful to the users working with the data.
44
44
45
45
## Reference data files
46
46
@@ -60,7 +60,7 @@ In this pattern, it makes sense to register the individual reference data files
60
60
61
61
## Alternate patterns
62
62
63
-
The patterns described in the preceding section are just two possible ways a big data store may be organized, but each implementation is different. Regardless of how your data sources are structured, when registering big data sources with **Azure Data Catalog**, focus on registering the files and directories that represent the data sets that are of value to others within your organization. Registering all files and directories can clutter the catalog, making it harder for users to find what they need.
63
+
The patterns described in the preceding sections are two possible ways a big data store may be organized, but each implementation is different. Regardless of how your data sources are structured, when registering big data sources with **Azure Data Catalog**, focus on registering the files and directories that represent the data sets that are of value to others within your organization. Registering all files and directories can clutter the catalog, making it harder for users to find what they need.
Copy file name to clipboardExpand all lines: articles/data-catalog/data-catalog-how-to-secure-catalog.md
+15-15Lines changed: 15 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,11 +1,11 @@
1
1
---
2
2
title: How to secure access to Azure Data Catalog
3
3
description: This article explains how to secure a data catalog and its data assets in Azure Data Catalog.
4
-
author: JasonWHowell
5
-
ms.author: jasonh
4
+
author: ChandraKavya
5
+
ms.author: kchandra
6
6
ms.service: data-catalog
7
7
ms.topic: how-to
8
-
ms.date: 08/01/2019
8
+
ms.date: 02/14/2022
9
9
---
10
10
# How to secure access to data catalog and data assets
11
11
@@ -20,43 +20,43 @@ Azure Data Catalog allows you to specify who can access the data catalog and wha
20
20
21
21
To give a user or a group the access to a data catalog and set permissions:
22
22
23
-
1. On the [home page of your data catalog](https://www.azuredatacatalog.com), click**Settings** on the toolbar.
23
+
1. On the [home page of your data catalog](https://www.azuredatacatalog.com), select**Settings** on the toolbar.
24
24
25
-

25
+
:::image type="content" source="media/data-catalog-how-to-secure-catalog/data-catalog-settings.png" alt-text="Settings button in the toolbar highlighted.":::
26
26
27
27
2. In the settings page, expand the **Catalog Users** section.
28
28
29
-

29
+
:::image type="content" source="media/data-catalog-how-to-secure-catalog/data-catalog-add-button.png" alt-text="Catalog Users section is expanded, and the Add button is selected.":::
30
30
31
-
3.Click**Add**.
31
+
3.Select**Add**.
32
32
33
-
4. Enter the fully qualified **user name** or name of the **security group** in the Azure Active Directory (AAD) associated with the catalog. Use comma (`,’) as a separator if you are adding more than one user or group.
33
+
4. Enter the fully qualified **user name** or name of the **security group** in the Microsoft Azure Active Directory (Azure AD) associated with the catalog. Use comma (`,’) as a separator if you're adding more than one user or group.
34
34
35
-

35
+
:::image type="content" source="media/data-catalog-how-to-secure-catalog/data-catalog-users-groups.png" alt-text="Example user name and security groups added in the space, with a comma separating the two.":::
36
36
37
37
5. Press **ENTER** or **TAB** out of the text box.
38
38
39
39
6. Confirm that all permissions (**Annotate**, **Register**, and **Take Ownership**) are assigned to these users or groups by default. That is, the user or group can [register data assets](data-catalog-how-to-register.md), [annotate data assets](data-catalog-how-to-annotate.md), and [take ownership of data assets](data-catalog-how-to-manage.md).
40
40
41
-

41
+
:::image type="content" source="media/data-catalog-how-to-secure-catalog/data-catalog-default-permissions.png" alt-text="All permissions have been selected for each user.":::
42
42
43
-
7. To give a user or group only the read access to the catalog, clear the **annotate** option for that user or group. When you do so, the user or group cannot annotate data assets in the catalog but they can view them.
43
+
7. To give a user or group only the read access to the catalog, clear the **annotate** option for that user or group. Now the user or group can’t annotate data assets in the catalog, but they can view them.
44
44
45
45
8. To deny a user or group from registering data assets, clear the **register** option for that user or group.
46
46
47
47
9. To deny a user from taking ownership of a data asset, clear the **take ownership** option for that user or group.
48
48
49
-
10. To delete a user/group from catalog users, click**x** for the user/group at the bottom of the list.
49
+
10. To delete a user/group from catalog users, select**x** for the user/group at the bottom of the list.
50
50
51
-

51
+
:::image type="content" source="media/data-catalog-how-to-secure-catalog/data-catalog-delete-user.png" alt-text="Users are shown at the bottom of the permissions list, and the x button beside one of the users has been highlighted.":::
52
52
53
53
> [!IMPORTANT]
54
54
> We recommend that you add security groups to catalog users rather than adding users directly and assign permissions. Then, add users to the security groups that match their roles and their required access to the catalog.
55
55
56
56
## Special considerations
57
57
58
-
- The permissions assigned to security groups are additive. Say, a user is in two groups. One group has annotate permissions and other group does not have annotate permissions. Then, user has annotate permissions.
59
-
- The permissions assigned explicitly to a user override the permissions assigned to groups to which the user belongs. In the previous example, say, you explicitly added the user to catalog users and do not assign annotate permissions. The user cannot annotate data assets even though the user is a member of a group that does have annotate permissions.
58
+
- The permissions assigned to security groups are additive. For example: a user is in two groups. One group has annotate permissions and other group doesn't have annotate permissions. Then, the user has annotate permissions.
59
+
- The permissions assigned explicitly to a user override the permissions assigned to groups to which the user belongs. For example: A user is in a group that has annotate permissions. If you explicitly add the user to catalog users and don't assign annotate permissions, then the user can’t annotate data assets. The explicit permission on the user overrides the group permissions.
0 commit comments