Skip to content

Commit c5804d5

Browse files
committed
Edits for clarity
1 parent 43f4dce commit c5804d5

File tree

1 file changed

+16
-17
lines changed

1 file changed

+16
-17
lines changed

articles/healthcare-apis/fhir/configure-export-data.md

Lines changed: 16 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -12,21 +12,21 @@ ms.author: kesheth
1212

1313
# Configure export settings and set up a storage account
1414

15-
The FHIR service supports the `$export` operation [specified by HL7](https://www.hl7.org/fhir/uv/bulkdata/) for exporting FHIR data from a FHIR server. In the FHIR service implementation, calling the `$export` endpoint causes the FHIR service to export data into a pre-configured Azure storage account.
15+
The FHIR® service supports the `$export` operation [specified by HL7](https://www.hl7.org/fhir/uv/bulkdata/) for exporting FHIR data from a FHIR server. In the FHIR service implementation, calling the `$export` endpoint causes the FHIR service to export data into a pre-configured Azure storage account.
1616

17-
Ensure you are granted with application role - 'FHIR Data exporter role' prior to configuring export. To understand more on application roles, see [Authentication and Authorization for FHIR service](../../healthcare-apis/authentication-authorization.md).
17+
Ensure you are granted the application role 'FHIR Data exporter role' prior to configuring export. To understand more on application roles, see [Authentication and Authorization for FHIR service](../../healthcare-apis/authentication-authorization.md).
1818

19-
Three steps in setting up the `$export` operation for the FHIR service-
19+
There are three steps in setting up the `$export` operation for the FHIR service-
2020

2121
- Enable a managed identity for the FHIR service.
2222
- Configure a new or existing Azure Data Lake Storage Gen2 (ADLS Gen2) account and give permission for the FHIR service to access the account.
2323
- Set the ADLS Gen2 account as the export destination for the FHIR service.
2424

2525
## Enable managed identity for the FHIR service
2626

27-
The first step in configuring your environment for FHIR data export is to enable a system-wide managed identity for the FHIR service. This managed identity is used to authenticate the FHIR service to allow access to the ADLS Gen2 account during an `$export` operation. For more information about managed identities in Azure, see [About managed identities for Azure resources](../../active-directory/managed-identities-azure-resources/overview.md).
27+
The first step in configuring your environment for FHIR data export is to enable a system-wide managed identity for the FHIR service. This managed identity is used to authenticate the FHIR service, allowing access to the ADLS Gen2 account during an `$export` operation. For more information about managed identities in Azure, see [About managed identities for Azure resources](../../active-directory/managed-identities-azure-resources/overview.md).
2828

29-
In this step, browse to your FHIR service in the Azure portal and select the **Identity** blade. Set the **Status** option to **On**, and then click **Save**. When the **Yes** and **No** buttons display, select **Yes** to enable the managed identity for the FHIR service. Once the system identity has been enabled, you'll see an **Object (principal) ID** value for your FHIR service.
29+
In this step, browse to your FHIR service in the Azure portal and select **Identity**. Set the **Status** option to **On**, and then click **Save**. When the **Yes** and **No** buttons display, select **Yes** to enable the managed identity for the FHIR service. Once the system identity has been enabled, you'll see an **Object (principal) ID** value for your FHIR service.
3030

3131
[![Enable Managed Identity](media/export-data/fhir-mi-enabled.png)](media/export-data/fhir-mi-enabled.png#lightbox)
3232

@@ -48,7 +48,7 @@ In this step, browse to your FHIR service in the Azure portal and select the **I
4848

4949
6. Select your Azure subscription.
5050

51-
7. Select **System-assigned managed identity**, and then select the managed identity that you enabled earlier for your FHIR service.
51+
7. Select **System-assigned managed identity**, and then select the managed identity that you previously enabled for your FHIR service.
5252

5353
8. On the **Review + assign** tab, click **Review + assign** to assign the **Storage Blob Data Contributor** role to your FHIR service.
5454

@@ -58,36 +58,35 @@ Now you're ready to configure the FHIR service by setting the ADLS Gen2 account
5858

5959
## Specify the storage account for FHIR service export
6060

61-
The final step is to specify the ADLS Gen2 account that the FHIR service uses when exporting data.
61+
The final step is to specify the ADLS Gen2 account the FHIR service uses when exporting data.
6262

6363
> [!NOTE]
6464
> In the storage account, if you haven't assigned the **Storage Blob Data Contributor** role to the FHIR service, the `$export` operation will fail.
6565
6666
1. Go to your FHIR service settings.
6767

68-
2. Select the **Export** blade.
68+
2. Select **Export**.
6969

7070
3. Select the name of the storage account from the list. If you need to search for your storage account, use the **Name**, **Resource group**, or **Region** filters.
7171

7272
[![Screen shot showing user interface of FHIR Export Storage.](media/export-data/fhir-export-storage.png)](media/export-data/fhir-export-storage.png#lightbox)
7373

74-
After you've completed this final configuration step, you're ready to export data from the FHIR service. See [How to export FHIR data](./export-data.md) for details on performing `$export` operations with the FHIR service.
74+
After you've completed this configuration step, you're ready to export data from the FHIR service. See [How to export FHIR data](./export-data.md) for details on performing `$export` operations with the FHIR service.
7575

7676
> [!NOTE]
7777
> Only storage accounts in the same subscription as the FHIR service are allowed to be registered as the destination for `$export` operations.
7878
7979
## Securing the FHIR service `$export` operation
8080

81-
For securely exporting from the FHIR service to an ADLS Gen2 account, there are two main options:
81+
For securely exporting from the FHIR service to an ADLS Gen2 account, there are two options:
8282

8383
* Allowing the FHIR service to access the storage account as a Microsoft Trusted Service.
8484

85-
* Allowing specific IP addresses associated with the FHIR service to access the storage account.
86-
This option permits two different configurations depending on whether or not the storage account is in the same Azure region as the FHIR service.
85+
* Allowing specific IP addresses associated with the FHIR service to access the storage account. This option permits two different configurations depending on whether or not the storage account is in the same Azure region as the FHIR service.
8786

8887
### Allowing FHIR service as a Microsoft Trusted Service
8988

90-
Go to your ADLS Gen2 account in the Azure portal and select the **Networking** blade. Select **Enabled from selected virtual networks and IP addresses** under the **Firewalls and virtual networks** tab.
89+
Go to your ADLS Gen2 account in the Azure portal and select **Networking**. Select **Enabled from selected virtual networks and IP addresses** under the **Firewalls and virtual networks** tab.
9190

9291
:::image type="content" source="media/export-data/storage-networking-1.png" alt-text="Screenshot of Azure Storage Networking Settings." lightbox="media/export-data/storage-networking-1.png":::
9392

@@ -97,13 +96,13 @@ Under the **Exceptions** section, select the box **Allow Azure services on the t
9796

9897
:::image type="content" source="media/export-data/exceptions.png" alt-text="Allow trusted Microsoft services to access this storage account.":::
9998

100-
Next, run the following PowerShell command to install the `Az.Storage` PowerShell module in your local environment. This allows you to configure your Azure storage account(s) using PowerShell.
99+
Next, run the following PowerShell command to install the `Az.Storage` PowerShell module in your local environment. This allows you to configure your Azure storage accounts using PowerShell.
101100

102101
```PowerShell
103102
Install-Module Az.Storage -Repository PsGallery -AllowClobber -Force
104103
```
105104

106-
Now, use the PowerShell command below to set the selected FHIR service instance as a trusted resource for the storage account. Make sure that all listed parameters are defined in your PowerShell environment.
105+
Now, use the following PowerShell command to set the selected FHIR service instance as a trusted resource for the storage account. Make sure that all listed parameters are defined in your PowerShell environment.
107106

108107
You'll need to run the `Add-AzStorageAccountNetworkRule` command as an administrator in your local environment. For more information, see [Configure Azure Storage firewalls and virtual networks](../../storage/common/storage-network-security.md).
109108

@@ -131,9 +130,9 @@ The storage account is on selected networks and isn't publicly accessible. To se
131130

132131
## Next steps
133132

134-
In this article, you learned about the three steps in configuring your environment to allow export of data from your FHIR service to an Azure storage account. For more information about Bulk Export capabilities in the FHIR service, see
133+
In this article, you learned about the three steps in configuring your environment to allow export of data from your FHIR service to an Azure storage account. For more information about Bulk Export capabilities in the FHIR service, see the following.
135134

136135
>[!div class="nextstepaction"]
137136
>[How to export FHIR data](export-data.md)
138137
139-
FHIR® is a registered trademark of [HL7](https://hl7.org/fhir/) and is used with the permission of HL7.
138+
[!INCLUDE [FHIR trademark statement](../includes/healthcare-apis-fhir-trademark.md)]

0 commit comments

Comments
 (0)