Skip to content

Commit bbae34a

Browse files
Added grant references DATABASE SCOPED credential
1 parent dcabf2b commit bbae34a

File tree

1 file changed

+15
-3
lines changed

1 file changed

+15
-3
lines changed

articles/synapse-analytics/sql/tutorial-logical-data-warehouse.md

Lines changed: 15 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ author: jovanpop-msft
66
ms.service: synapse-analytics
77
ms.topic: tutorial
88
ms.subservice: sql
9-
ms.date: 04/28/2021
9+
ms.date: 08/20/2021
1010
ms.author: jovanpop
1111
ms.reviewer: jrasnick
1212
---
@@ -77,6 +77,18 @@ WITH IDENTITY = 'SHARED ACCESS SIGNATURE',
7777
SECRET = 's5zarR2pT0JWH9k8roipnWxUYBegOuFGjJpSjGlR36y86cW0GQ6RaaG8kGjsRAQoWMw1QKTkkX8HQtFpJjC8Hg==';
7878
```
7979

80+
Any user with the Synapse Administrator role can use these credentials to access Azure Data Lake storage or Cosmos DB analytical storage.
81+
If you have low priviledged users that do not have Synapse Administrator role, you would need to give them an explicit permission to reference these database scoped credentials:
82+
83+
```sql
84+
GRANT REFERENCES ON DATABASE SCOPED CREDENTIAL::MyCosmosDbAccountCredential TO [jovan@contoso.com]
85+
GO
86+
GRANT REFERENCES ON DATABASE SCOPED CREDENTIAL::MyCosmosDbAccountCredential TO [jovan@contoso.com]
87+
GO
88+
```
89+
90+
Find more details in [grant DATABASE SCOPED CREDENTIAL permissions](https://docs.microsoft.com/sql/t-sql/statements/grant-database-scoped-credential-transact-sql) page.
91+
8092
### Define external file formats
8193

8294
External file formats define the structure of the files stored on external data source. You can define Parquet and CSV external file formats:
@@ -202,7 +214,7 @@ GRANT SELECT ON SCHEMA::ecdc_adls TO [jovan@contoso.com]
202214
GO
203215
GRANT SELECT ON OBJECT::ecdc_cosmosDB.cases TO [jovan@contoso.com]
204216
GO
205-
GRANT REFERENCES ON CREDENTIAL::MyCosmosDbAccountCredential TO [jovan@contoso.com]
217+
GRANT REFERENCES ON DATABASE SCOPED CREDENTIAL::MyCosmosDbAccountCredential TO [jovan@contoso.com]
206218
GO
207219
```
208220

@@ -246,4 +258,4 @@ This role-based security access control might simplify management of your securi
246258
## Next steps
247259

248260
- To learn how to connect serverless SQL pool to Power BI Desktop and create reports, see [Connect serverless SQL pool to Power BI Desktop and create reports](tutorial-connect-power-bi-desktop.md).
249-
- To learn how to use External tables in serverless SQL pool see [Use external tables with Synapse SQL](develop-tables-external-tables.md?tabs=sql-pool)
261+
- To learn how to use External tables in serverless SQL pool see [Use external tables with Synapse SQL](develop-tables-external-tables.md?tabs=sql-pool)

0 commit comments

Comments
 (0)