You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/operator-insights/data-product-create.md
+47-73Lines changed: 47 additions & 73 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -63,15 +63,20 @@ az login
63
63
64
64
### Change the active subscription
65
65
66
-
Azure subscriptions have both a name and an ID. You can switch to a different subscription using[az account set](/cli/azure/account#az-account-set) specifying the desired subscription ID or name.
66
+
Azure subscriptions have both a name and an ID. You can switch to a different subscription with[az account set](/cli/azure/account#az-account-set), specifying the desired subscription name or ID.
67
67
68
-
```azurecli-interactive
69
-
# change the active subscription using the subscription name
70
-
az account set --subscription "My Demos"
68
+
- To use the name to change the active subscription:
69
+
```azurecli-interactive
70
+
az account set --subscription "<SubscriptionName>"
71
+
```
72
+
- To use the ID to change the active subscription:
73
+
```azurecli-interactive
74
+
az account set --subscription "<SubscriptionID>"
75
+
```
76
+
77
+
> [!NOTE]
78
+
> Replace any values shown in the form \<KeyVaultName\> with the values for your deployment.
71
79
72
-
# change the active subscription using the subscription ID
73
-
az account set --subscription "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
74
-
```
75
80
---
76
81
77
82
## Create a resource group
@@ -88,14 +93,14 @@ If you plan to use CMK-based data encryption or Microsoft Purview, set up a reso
88
93
89
94
For more information, see [Create a resource group](/azure-resource-manager/management/manage-resource-groups-portal#create-resource-groups).
90
95
91
-
If you don't plan to use CMK-based date encryption or Microsoft Purview, you can set up a resource group now or when you [the create the Data Product resource](#create-an-azure-operator-insights-data-product-resource).
96
+
If you don't plan to use CMK-based date encryption or Microsoft Purview, you can set up a resource group now or when you [create the Data Product resource](#create-an-azure-operator-insights-data-product-resource).
92
97
93
98
# [Azure CLI](#tab/azure-cli)
94
99
95
-
Use the az group create command to create a resource group named myResourceGroup in the eastus location.
100
+
Use the `az group create` command to create a resource group named \<ResourceGroup\> in the region where you want to deploy.
96
101
97
102
```azurecli-interactive
98
-
az group create --name "myResourceGroup" --location "EastUS"
103
+
az group create --name "<ResourceGroup>" --location "<Region>"
99
104
```
100
105
---
101
106
@@ -109,7 +114,7 @@ Azure key Vault Resource is used to store your Customer Managed Key (CMK) for da
109
114
110
115
# [Portal](#tab/azure-portal)
111
116
112
-
1.[Create an Azure Key Vault resource](../key-vault/general/quick-create-portal.md) in the same subscription and resource group where you intend to deploy the Data Product resource.
117
+
1.[Create an Azure Key Vault resource](../key-vault/general/quick-create-portal.md) in the same subscription and resource group that you set up in [Create a resource group](#create-a-resource-group).
113
118
1. Provide your user account with the Key Vault Administrator role on the Azure Key Vault resource. This is done via the **Access Control (IAM)** tab on the Azure Key Vault resource.
114
119
1. Navigate to the object and select **Keys**. Select **Generate/Import**.
115
120
1. Enter a name for the key and select **Create**.
@@ -122,44 +127,38 @@ Azure key Vault Resource is used to store your Customer Managed Key (CMK) for da
122
127
123
128
#### Create a key vault
124
129
125
-
Use the Azure CLI az keyvault create command to create a Key Vault in the resource group from the previous step. You will need to provide some information:
126
-
127
-
- Key vault name: A string of 3 to 24 characters that can contain only numbers (0-9), letters (a-z, A-Z), and hyphens (-)
128
-
129
-
Important
130
-
131
-
Each key vault must have a unique name. Replace <your-unique-keyvault-name> with the name of your key vault in the following examples.
130
+
Use the Azure CLI `az keyvault create` command to create a Key Vault in the resource group from the previous step. You must provide:
132
131
133
-
-Resource group name: myResourceGroup.
134
-
135
-
- The location: EastUS.
132
+
-A name for the key vault: A string of 3 to 24 characters that can contain only numbers (0-9), letters (a-z, A-Z), and hyphens (-). Each key vault must have a unique name.
133
+
- The resource group that you created in [Create a resource group](#create-a-resource-group).
134
+
- The region in which you created the resource group.
136
135
137
136
```azurecli-interactive
138
-
az keyvault create --name "<your-unique-keyvault-name>" --resource-group "myResourceGroup" --location "EastUS"
137
+
az keyvault create --name "<KeyVaultName>" --resource-group "<ResourceGroup>" --location "<Region>"
139
138
```
140
139
141
-
The output of this command shows properties of the newly created key vault. Take note of the two properties listed below:
140
+
The output of this command shows properties of the newly created key vault. Take note of:
141
+
142
+
- Vault Name: The name you provided to the `--name` parameter you ran.
143
+
- Vault URI: In the example, the URI is `https://<KeyVaultName>.vault.azure.net/`. Applications that use your vault through its REST API must use this URI.
142
144
143
-
Vault Name: The name you provided to the --name parameter above.
144
-
Vault URI: In the example, this is https://<your-unique-keyvault-name>.vault.azure.net/. Applications that use your vault through its REST API must use this URI.
145
145
At this point, your Azure account is the only one authorized to perform any operations on this new vault.
146
146
147
147
#### Assign roles for the key vault
148
148
149
149
Provide your user account with the Key Vault Administrator role on the Azure Key Vault resource.
150
150
151
151
```azurecli-interactive
152
-
az role assignment create --role "Key Vault Administrator" --assignee <<user email address>> --scope /subscriptions/{subscriptionid}/resourcegroups/{resource-group-name}/providers/Microsoft.KeyVault/vaults/{key-vault-name}
152
+
az role assignment create --role "Key Vault Administrator" --assignee <YourEmailAddress> --scope /subscriptions/<SubscriptionID>/resourcegroups/<ResourceGroup>/providers/Microsoft.KeyVault/vaults/<KeyVaultName>
153
153
```
154
-
Replace the values for subscriptionid, resource-group-name, and key-vault-name with the appropriate values.
155
154
156
-
#### Create a Key
155
+
#### Create a key
157
156
158
157
```azurecli-interactive
159
-
az keyvault key create --vault-name "<your-unique-keyvault-name>" -n ExampleKey --protection software
158
+
az keyvault key create --vault-name "<KeyVaultName>" -n <keyName> --protection software
160
159
```
161
160
162
-
From the output screen copy the KeyID and store it in your clipboard for later use.
161
+
From the output screen, copy the `KeyID` and store it in your clipboard for later use.
163
162
164
163
---
165
164
@@ -180,22 +179,21 @@ From the output screen copy the KeyID and store it in your clipboard for later u
180
179
181
180
To create a user-assigned managed identity, your account needs the Managed Identity Contributor role assignment.
182
181
183
-
Use the az identity create command to create a user-assigned managed identity. The -g parameter specifies the resource group where to create the user-assigned managed identity. The -n parameter specifies its name. Replace the <RESOURCEGROUP> and <USERASSIGNEDIDENTITYNAME> parameter values with your own values.
184
-
185
-
Important
182
+
Use the `az identity create` command to create a user-assigned managed identity. The -g parameter specifies the resource group where to create the user-assigned managed identity. The -n parameter specifies its name. Replace the \<ResourceGroup\> and \<UserAssignedIdentityName\> parameter values with your own values.
186
183
187
-
When you create user-assigned managed identities, only alphanumeric characters (0-9, a-z, and A-Z) and the hyphen (-) are supported.
184
+
> [!IMPORTANT]
185
+
> When you create user-assigned managed identities, only alphanumeric characters (0-9, a-z, and A-Z) and the hyphen (-) are supported.
az identity create -g <ResourceGroup> -n <UserAssignedIdentityName>
191
189
```
192
190
193
-
Copy the principalId from the output screen and store it in your clipboard for later use.
191
+
Copy the `principalId` from the output screen and store it in your clipboard for later use.
194
192
195
193
#### Assign the user-assigned managed identity to the key vault
196
194
197
195
```azurecli-interactive
198
-
az role assignment create --role "Key Vault Administrator" --assignee <<pricipalID from above step>> --scope /subscriptions/{subscriptionid}/resourcegroups/{resource-group-name}/providers/Microsoft.KeyVault/vaults/{key-vault-name}
196
+
az role assignment create --role "Key Vault Administrator" --assignee <principalId> --scope /subscriptions/<SubscriptionID>/resourcegroups/<ResourceGroup>/providers/Microsoft.KeyVault/vaults/<KeyVaultName>
199
197
```
200
198
201
199
---
@@ -236,51 +234,27 @@ You create the Azure Operator Insights Data Product resource.
236
234
237
235
# [Azure CLI](#tab/azure-cli)
238
236
239
-
To create a Azure Operator Insights DataProduct with just mandatory parameters, use the following command:
237
+
To create an Azure Operator Insights Data Product with the minimum required parameters, use the following command:
240
238
241
239
```azurecli-interactive
242
-
az network-analytics data-product create --name <<dpname>> --resource-group <<rgname>> --location <<azurelocation>> --publisher Microsoft --product <<product name>> --major-version <<product major version>>
240
+
az network-analytics data-product create --name <DataProductName> --resource-group <ResourceGroup> --location <Region> --publisher Microsoft --product <ProductName> --major-version <ProductMajorVersion>
243
241
```
244
242
245
-
To create a Azure Operator Insights DataProduct with all parameters, use the following command:
243
+
Use the following values for \<ProductName\> and \<ProductMajorVersion>.
246
244
247
-
```azurecli-interactive
248
-
az network-analytics data-product create --data-product-name
249
-
--resource-group
250
-
[--encryption-key]
251
-
[--identity]
252
-
[--key-encryption-enable {Disabled, Enabled}]
253
-
[--location]
254
-
[--major-version]
255
-
[--managed-rg]
256
-
[--networkacls]
257
-
[--no-wait {0, 1, f, false, n, no, t, true, y, yes}]
0 commit comments