You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
## Microsoft Purview private endpoint deployment scenarios
18
18
19
-
You can use [Azure private endpoints](../../private-link/private-endpoint-overview.md) for your Azure Purview accounts to allow secure access from a virtual network (VNet) to the catalog over a Private Link. Azure Purview provides different types of private points for various access need: *account* private endpoint, *portal* private endpoint, and *ingestion* private endpoints. Learn more from [Azure Purview private endpoints conceptual overview](../../purview/catalog-private-link.md#conceptual-overview).
19
+
You can use [Azure private endpoints](../../private-link/private-endpoint-overview.md) for your Microsoft Purview accounts to allow secure access from a virtual network (VNet) to the catalog over a Private Link. Microsoft Purview provides different types of private points for various access need: *account* private endpoint, *portal* private endpoint, and *ingestion* private endpoints. Learn more from [Microsoft Purview private endpoints conceptual overview](../../purview/catalog-private-link.md#conceptual-overview).
20
20
21
-
If your Azure Purview account is protected by firewall and denies public access, make sure you follow below checklist to set up the private endpoints so Synapse can successfully connect to Azure Purview.
21
+
If your Microsoft Purview account is protected by firewall and denies public access, make sure you follow below checklist to set up the private endpoints so Synapse can successfully connect to Microsoft Purview.
|[Run pipeline and report lineage to Azure Purview](../../purview/how-to-lineage-azure-synapse-analytics.md)| For Synapse pipeline to push lineage to Azure Purview, Azure Purview ***account*** and ***ingestion*** private endpoints are required. <br>- When using **Azure Integration Runtime**, follow the steps in [Managed private endpoints for Azure Purview](#managed-private-endpoints-for-azure-purview) section to create managed private endpoints in the Synapse managed virtual network.<br>- When using **Self-hosted Integration Runtime**, follow the steps in [this section](../../purview/catalog-private-link-end-to-end.md#option-2---enable-account-portal-and-ingestion-private-endpoint-on-existing-azure-purview-accounts) to create the *account* and *ingestion* private endpoints in your integration runtime's virtual network. |
26
-
|[Discover and explore data using Azure Purview on Synapse Studio](how-to-discover-connect-analyze-azure-purview.md)| To use the search bar at the top center of Synapse Studio to search for Azure Purview data and perform actions, you need to create Azure Purview ***account*** and ***portal*** private endpoints in the virtual network that you launch the Synapse Studio. Follow the steps in [Enable *account* and *portal* private endpoint](../../purview/catalog-private-link-account-portal.md#option-2---enable-account-and-portal-private-endpoint-on-existing-azure-purview-accounts). |
25
+
|[Run pipeline and report lineage to Microsoft Purview](../../purview/how-to-lineage-azure-synapse-analytics.md)| For Synapse pipeline to push lineage to Microsoft Purview, Microsoft Purview ***account*** and ***ingestion*** private endpoints are required. <br>- When using **Azure Integration Runtime**, follow the steps in [Managed private endpoints for Microsoft Purview](#managed-private-endpoints-for-microsoft-purview) section to create managed private endpoints in the Synapse managed virtual network.<br>- When using **Self-hosted Integration Runtime**, follow the steps in [this section](../../purview/catalog-private-link-end-to-end.md#option-2---enable-account-portal-and-ingestion-private-endpoint-on-existing-azure-purview-accounts) to create the *account* and *ingestion* private endpoints in your integration runtime's virtual network. |
26
+
|[Discover and explore data using Microsoft Purview on Synapse Studio](how-to-discover-connect-analyze-azure-purview.md)| To use the search bar at the top center of Synapse Studio to search for Microsoft Purview data and perform actions, you need to create Microsoft Purview ***account*** and ***portal*** private endpoints in the virtual network that you launch the Synapse Studio. Follow the steps in [Enable *account* and *portal* private endpoint](../../purview/catalog-private-link-account-portal.md#option-2---enable-account-and-portal-private-endpoint-on-existing-azure-purview-accounts). |
27
27
28
-
## Managed private endpoints for Azure Purview
28
+
## Managed private endpoints for Microsoft Purview
29
29
30
-
[Managed private endpoints](../security/synapse-workspace-managed-private-endpoints.md) are private endpoints created a Managed Virtual Network associated with your Azure Synapse workspace. When you run pipeline and report lineage to a firewall protected Azure Purview account, make sure your Synapse workspace is created with "Managed virtual network" option enabled, then create the Azure Purview ***account*** and ***ingestion*** managed private endpoints as follows.
30
+
[Managed private endpoints](../security/synapse-workspace-managed-private-endpoints.md) are private endpoints created a Managed Virtual Network associated with your Azure Synapse workspace. When you run pipeline and report lineage to a firewall protected Microsoft Purview account, make sure your Synapse workspace is created with "Managed virtual network" option enabled, then create the Microsoft Purview ***account*** and ***ingestion*** managed private endpoints as follows.
31
31
32
32
### Create managed private endpoints
33
33
34
-
To create managed private endpoints for Azure Purview on Synapse Studio:
34
+
To create managed private endpoints for Microsoft Purview on Synapse Studio:
35
35
36
-
1. Go to **Manage** -> **Azure Purview**, and click **Edit** to edit your existing connected Azure Purview account or click **Connect to an Azure Purview account** to connect to a new Azure Purview account.
36
+
1. Go to **Manage** -> **Microsoft Purview**, and click **Edit** to edit your existing connected Microsoft Purview account or click **Connect to a Microsoft Purview account** to connect to a new Microsoft Purview account.
37
37
38
38
2. Select **Yes** for **Create managed private endpoints**. You need to have "**workspaces/managedPrivateEndpoint/write**" permission, e.g. Synapse Administrator or Synapse Linked Data Manager role.
39
39
40
-
3. Click **+ Create all** button to batch create the needed Azure Purview private endpoints, including the ***account*** private endpoint and the ***ingestion*** private endpoints for the Azure Purview managed resources - Blob storage, Queue storage, and Event Hubs namespace. You need to have at least **Reader** role on your Azure Purview account for Synapse to retrieve the Azure Purview managed resources' information.
40
+
3. Click **+ Create all** button to batch create the needed Microsoft Purview private endpoints, including the ***account*** private endpoint and the ***ingestion*** private endpoints for the Microsoft Purview managed resources - Blob storage, Queue storage, and Event Hubs namespace. You need to have at least **Reader** role on your Microsoft Purview account for Synapse to retrieve the Microsoft Purview managed resources' information.
41
41
42
-
:::image type="content" source="./media/purview-create-all-managed-private-endpoints.png" alt-text="Create managed private endpoint for your connected Azure Purview account.":::
42
+
:::image type="content" source="./media/purview-create-all-managed-private-endpoints.png" alt-text="Create managed private endpoint for your connected Microsoft Purview account.":::
43
43
44
44
4. In the next page, specify a name for the private endpoint. It will be used to generate names for the ingestion private endpoints as well with suffix.
45
45
46
-
:::image type="content" source="./media/name-purview-private-endpoints.png" alt-text="Name the managed private endpoints for your connected Azure Purview account.":::
46
+
:::image type="content" source="./media/name-purview-private-endpoints.png" alt-text="Name the managed private endpoints for your connected Microsoft Purview account.":::
47
47
48
-
5. Click **Create** to create the private endpoints. After creation, 4 private endpoint requests will be generated that must [get approved by an owner of Azure Purview](#approve-private-endpoint-connections).
48
+
5. Click **Create** to create the private endpoints. After creation, 4 private endpoint requests will be generated that must [get approved by an owner of Microsoft Purview](#approve-private-endpoint-connections).
49
49
50
-
Such batch managed private endpoint creation is provided on the Synapse Studio only. If you want to create the managed private endpoints programmatically, you need to create those PEs individually. You can find Azure Purview managed resources' information from Azure portal -> your Azure Purview account -> Managed resources.
50
+
Such batch managed private endpoint creation is provided on the Synapse Studio only. If you want to create the managed private endpoints programmatically, you need to create those PEs individually. You can find Microsoft Purview managed resources' information from Azure portal -> your Microsoft Purview account -> Managed resources.
51
51
52
52
### Approve private endpoint connections
53
53
54
-
After you create the managed private endpoints for Azure Purview, you see "Pending" state first. The Azure Purview owner need to approve the private endpoint connections for each resource.
54
+
After you create the managed private endpoints for Microsoft Purview, you see "Pending" state first. The Microsoft Purview owner need to approve the private endpoint connections for each resource.
55
55
56
-
If you have permission to approve the Azure Purview private endpoint connection, from Synapse Studio:
56
+
If you have permission to approve the Microsoft Purview private endpoint connection, from Synapse Studio:
57
57
58
-
1. Go to **Manage** -> **Azure Purview** -> **Edit**
58
+
1. Go to **Manage** -> **Microsoft Purview** -> **Edit**
59
59
2. In the private endpoint list, click the **Edit** (pencil) button next to each private endpoint name
60
60
3. Click **Manage approvals in Azure portal** which will bring you to the resource.
61
61
4. On the given resource, go to **Networking** -> **Private endpoint connection** to approve it. The private endpoint is named as `data_factory_name.your_defined_private_endpoint_name` with description as "Requested by data_factory_name".
62
62
5. Repeat this operation for all private endpoints.
63
63
64
-
If you don't have permission to approve the Azure Purview private endpoint connection, ask the Azure Purview account owner to do as follows.
64
+
If you don't have permission to approve the Microsoft Purview private endpoint connection, ask the Microsoft Purview account owner to do as follows.
65
65
66
-
- For *account* private endpoint, go to Azure portal -> your Azure Purview account -> Networking -> Private endpoint connection to approve.
67
-
- For *ingestion* private endpoints, go to Azure portal -> your Azure Purview account -> Managed resources, click into the Storage account and Event Hubs namespace respectively, and approve the private endpoint connection in Networking -> Private endpoint connection page.
66
+
- For *account* private endpoint, go to Azure portal -> your Microsoft Purview account -> Networking -> Private endpoint connection to approve.
67
+
- For *ingestion* private endpoints, go to Azure portal -> your Microsoft Purview account -> Managed resources, click into the Storage account and Event Hubs namespace respectively, and approve the private endpoint connection in Networking -> Private endpoint connection page.
68
68
69
69
### Monitor managed private endpoints
70
70
71
-
You can monitor the created managed private endpoints for Azure Purview at two places:
71
+
You can monitor the created managed private endpoints for Microsoft Purview at two places:
72
72
73
-
- Go to **Manage** -> **Azure Purview** -> **Edit** to open your existing connected Azure Purview account. To see all the relevant private endpoints, you need to have at least **Reader** role on your Azure Purview account for Synapse to retrieve the Azure Purview managed resources' information. Otherwise, you only see *account* private endpoint with warning.
74
-
- Go to **Manage** -> **Managed private endpoints** where you see all the managed private endpoints created under the Synapse workspace. If you have at least **Reader** role on your Azure Purview account, you see Azure Purview relevant private endpoints being grouped together. Otherwise, they show up separately in the list.
73
+
- Go to **Manage** -> **Microsoft Purview** -> **Edit** to open your existing connected Microsoft Purview account. To see all the relevant private endpoints, you need to have at least **Reader** role on your Microsoft Purview account for Synapse to retrieve the Microsoft Purview managed resources' information. Otherwise, you only see *account* private endpoint with warning.
74
+
- Go to **Manage** -> **Managed private endpoints** where you see all the managed private endpoints created under the Synapse workspace. If you have at least **Reader** role on your Microsoft Purview account, you see Microsoft Purview relevant private endpoints being grouped together. Otherwise, they show up separately in the list.
75
75
76
76
## Next steps
77
77
78
-
-[Connect Synapse workspace to Azure Purview](quickstart-connect-azure-purview.md)
78
+
-[Connect Synapse workspace to Microsoft Purview](quickstart-connect-azure-purview.md)
79
79
-[Metadata and lineage from Azure Synapse Analytics](../../purview/how-to-lineage-azure-synapse-analytics.md)
80
-
-[Discover, connect and explore data in Synapse using Azure Purview](how-to-discover-connect-analyze-azure-purview.md)
80
+
-[Discover, connect and explore data in Synapse using Microsoft Purview](how-to-discover-connect-analyze-azure-purview.md)
-[Connect an Azure Purview Account into Synapse](quickstart-connect-azure-purview.md)
21
+
-[Connect a Microsoft Purview Account into Synapse](quickstart-connect-azure-purview.md)
22
22
23
-
## Using Azure Purview in Synapse
23
+
## Using Microsoft Purview in Synapse
24
24
25
-
The use Azure Purview in Synapse requires you to have access to that Azure Purview account. Synapse passes-through your Azure Purview permission. As an example, if you have a curator permission role, you will be able to edit metadata scanned by Azure Purview.
25
+
The use Microsoft Purview in Synapse requires you to have access to that Microsoft Purview account. Synapse passes-through your Microsoft Purview permission. As an example, if you have a curator permission role, you will be able to edit metadata scanned by Microsoft Purview.
26
26
27
27
### Data discovery: search datasets
28
28
29
-
To discover data registered and scanned by Azure Purview, you can use the Search bar at the top center of Synapse workspace. Make sure that you select Azure Purview to search for all of your organization data.
29
+
To discover data registered and scanned by Microsoft Purview, you can use the Search bar at the top center of Synapse workspace. Make sure that you select Microsoft Purview to search for all of your organization data.
30
30
31
-
[](./media/purview-access.png#lightbox)
31
+
[](./media/purview-access.png#lightbox)
32
32
33
-
## Azure Purview actions
33
+
## Microsoft Purview actions
34
34
35
-
Here is a list of the Azure Purview features that are available in Synapse:
35
+
Here is a list of the Microsoft Purview features that are available in Synapse:
36
36
-**Overview** of the metadata
37
37
- View and edit **schema** of the metadata with classifications, glossary terms, data types, and descriptions
38
38
- View **lineage** to understand dependencies and do impact analysis. For more information about, see [lineage](../../purview/catalog-lineage-user-guide.md)
@@ -65,5 +65,5 @@ With **New data flow**, you can create an integration dataset that can be used a
65
65
66
66
## Next steps
67
67
68
-
-[Register and scan Azure Synapse assets in Azure Purview](../../purview/register-scan-azure-synapse-analytics.md)
69
-
-[How to Search Data in Azure Purview Data Catalog](../../purview/how-to-search-catalog.md)
68
+
-[Register and scan Azure Synapse assets in Microsoft Purview](../../purview/register-scan-azure-synapse-analytics.md)
69
+
-[How to Search Data in Microsoft Purview Data Catalog](../../purview/how-to-search-catalog.md)
0 commit comments