Skip to content

Commit d1720fe

Browse files
committed
link correction+roles update
1 parent 03e4401 commit d1720fe

11 files changed

+23
-23
lines changed

articles/data-share/concepts-roles-permissions.md

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -15,13 +15,13 @@ This article describes the roles required to share data using Azure Data Share P
1515

1616
## Roles and requirements
1717

18-
Azure Data Share uses Managed Identities for Azure Services (previously known as MSIs) to authenticate to underlying storage accounts in order to be able to read data to be shared by a data provider, as well as receive data shared as a data consumer. This ensures that there is no exchange of credentials between the data provider and the data consumer.
18+
Azure Data Share uses Managed Identities for Azure Services (previously known as MSIs) to authenticate to underlying storage accounts in order to be able to read data to be shared by a data provider, as well as receive data shared as a data consumer. As a result, there is no exchange of credentials between the data provider and the data consumer.
1919

20-
In order to facilitate this, the Managed Service Identity needs to be granted access to the underlying storage accounts. The Azure Data Share service uses the Azure Data Share resource's Managed Service Identity to to read and write data. This means that the user of Azure Data Share needs the ability to create a role assignment for the Managed Service Identity to the storage account that they are sharing data from/to. Typically this is a permission that exists in the **owner** role, User Access Administrator role or a custom role with Microsoft.Authorization/role assignments/write permission assigned.
20+
The Managed Service Identity needs to be granted access to the underlying storage accounts. The Azure Data Share service uses the Azure Data Share resource's Managed Service Identity to read and write data. The user of Azure Data Share needs the ability to create a role assignment for the Managed Service Identity to the storage account that they are sharing data from/to. Permission to create role assignments exists in the **owner** role, User Access Administrator role, or a custom role with Microsoft.Authorization/role assignments/write permission assigned.
2121

2222
If you are not an owner of the storage account in question, and you are unable to create a role assignment for the Azure Data Share resource's Managed Identity yourself, you can request an Azure Administrator to create a role assignment on your behalf.
2323

24-
Below is a summary of the roles assigned to Data Share resource Managed Identity:
24+
Below is a summary of the roles assigned to Data Share resource-Managed Identity:
2525

2626
| | | |
2727
|---|---|---|
@@ -31,9 +31,9 @@ Below is a summary of the roles assigned to Data Share resource Managed Identity
3131
|Azure Data Lake Gen2 | Storage Blob Data Reader | Storage Blob Data Contributor
3232
|
3333
### Data Providers
34-
To add a dataset to an Azure Data Share, the data providers data share resource managed identity needs to be added to the Storage Blob Data Reader role. This is done automatically by the Azure Data Share service if the user is adding datasets via the Azure Portal and is an owner of the storage account, or is a member of a custom role which has the Microsoft.Authorization/role assignments/write permission assigned.
34+
To add a dataset to an Azure Data Share, the data providers data share resource-managed identity needs to be added to the Storage Blob Data Reader role. This is done automatically by the Azure Data Share service if the user is adding datasets via Azure and is an owner of the storage account, or is a member of a custom role that has the Microsoft.Authorization/role assignments/write permission assigned.
3535

36-
In the absence of the above conditions, the user can have an Azure Administrator add the Data Share resource Managed Identity to the Storage Blob Data Reader account. Creating this role assignment manually by the Administrator will void having to be an owner of the Storage account or have a custom role assignment. Note that this applies to data being shared from Azure Storage or Azure Data Lake Gen2.
36+
Alternatively, the user can have an Azure Administrator add the data share resource-managed identity to the Storage Blob Data Reader role manually. Creating this role assignment manually by the Administrator will void having to be an owner of the Storage account or have a custom role assignment. This applies to data being shared from Azure Storage or Azure Data Lake Gen2.
3737

3838
If sharing data from Azure Data Lake Gen1, the role assignment must be made to the Owner role.
3939

@@ -47,11 +47,11 @@ To create a role assignment for the Data Share resource's Managed Identity, foll
4747
1. Click *Save*
4848

4949
### Data Consumers
50-
To receive data, the data consumers data share resource managed identity needs to be added to the Storage Blob Data Contributor role. This role is required to enable the Azure Data Share service to be able to write to the storage account. This is done automatically by the Azure Data Share service if the user is adding datasets via the Azure Portal and is an owner of the storage account, or is a member of a custom role which has the Microsoft.Authorization/role assignments/write permission assigned.
50+
To receive data, the data consumers data share resource-managed identity needs to be added to the Storage Blob Data Contributor role. This role is required to enable the Azure Data Share service to be able to write to the storage account. This is done automatically by the Azure Data Share service if the user is adding datasets via Azure and is an owner of the storage account, or is a member of a custom role which has the Microsoft.Authorization/role assignments/write permission assigned.
5151

52-
In the absence of the above conditions, the user can have an Azure Administrator add the Data Share resource Managed Identity to the Storage Blob Data Contributor account. Creating this role assignment manually by the Administrator will void having to be an owner of the Storage account or have a custom role assignment. Note that this applies to data being shared to Azure Storage or Azure Data Lake Gen2. Receiving data to Azure Data Lake Gen1 is not supported.
52+
Alternatively, the user can have an Azure Administrator add the data share resource-managed identity to the Storage Blob Data Contributor role manually. Creating this role assignment manually by the Administrator will void having to be an owner of the Storage account or have a custom role assignment. Note that this applies to data being shared to Azure Storage or Azure Data Lake Gen2. Receiving data to Azure Data Lake Gen1 is not supported.
5353

54-
To create a role assignment for the Data Share resource's Managed Identity, follow the below steps:
54+
To create a role assignment for the Data Share resource's Managed Identity manually, follow the below steps:
5555

5656
1. Navigate to the Storage account
5757
1. Select **Access Control (IAM)**
@@ -62,7 +62,7 @@ To create a role assignment for the Data Share resource's Managed Identity, foll
6262

6363
If you are sharing data using our REST APIs, you will need to create these role assignments manually by adding the data share account in to the appropriate roles.
6464

65-
To learn more about how to add a role assignment, refer to [this documentation](https://docs.microsoft.com/azure/role-based-access-control/role-assignments-portal#add-a-role-assignment) which outlines how to add a role assignment to an Azure resource.
65+
To learn more about how to add a role assignment, refer to [this documentation,](https://docs.microsoft.com/azure/role-based-access-control/role-assignments-portal#add-a-role-assignment) which outlines how to add a role assignment to an Azure resource.
6666

6767
## Resource Provider registration
6868

articles/data-share/scripts/powershell/accept-share-invitations-powershell.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,8 +39,8 @@ This script uses the following commands:
3939

4040
| Command | Notes |
4141
|---|---|
42-
| [Get-AzDataShareInvitation](/powershell/module/az.resources/get-azdatashareinvitation) | Get and list sent data share invitations. |
43-
| [New-AzDataShareSubscription](/powershell/module/az.resources/get-azdatashareinvitation) | Create a data share subscription. |
42+
| [Get-AzDataShareInvitation](/powershell/module/az.datashare/get-azdatashareinvitation?view=azps-2.6.0) | Get and list sent data share invitations. |
43+
| [New-AzDataShareSubscription](/powershell/module/az.datashare/get-azdatasharesubscription?view=azps-2.6.0) | Create a data share subscription. |
4444
|||
4545

4646
## Next steps

articles/data-share/scripts/powershell/add-datasets-powershell.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ This script uses the following commands:
4141

4242
| Command | Notes |
4343
|---|---|
44-
| [New-AzDataShareDataSet](/powershell/module/az.resources/new-azdatasharedataset) | Adds a dataset to a data share. |
44+
| [New-AzDataShareDataSet](/powershell/module/az.datashare/new-azdatasharedataset?view=azps-2.6.0) | Adds a dataset to a data share. |
4545
|||
4646

4747
## Next steps

articles/data-share/scripts/powershell/create-new-share-account-powershell.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ This script uses the following commands:
3333

3434
| Command | Notes |
3535
|---|---|
36-
| [New-AzDataShareAccount](/powershell/module/az.resources/new-azdatashareaccount) | Creates a data share account. |
36+
| [New-AzDataShareAccount](/powershell/module/az.datashare/new-azdatashareaccount?view=azps-2.6.0) | Creates a data share account. |
3737
|||
3838

3939
## Next steps

articles/data-share/scripts/powershell/create-new-share-powershell.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ This script uses the following commands:
3838

3939
| Command | Notes |
4040
|---|---|
41-
| [New-AzDataShare](/powershell/module/az.resources/new-azdatashare) | Creates a data share. |
41+
| [New-AzDataShare](/powershell/module/az.datashare/new-azdatashare?view=azps-2.6.0) | Creates a data share. |
4242
|||
4343

4444
## Next steps

articles/data-share/scripts/powershell/create-share-invitation-powershell.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ This script uses the following commands:
3737

3838
| Command | Notes |
3939
|---|---|
40-
| [New-AzDataShareInvitation](/powershell/module/az.resources/get-azdatasharesynchronizationdetails) | Create a data share invitation. |
40+
| [New-AzDataShareInvitation](/powershell/module/az.datashare/new-azdatashareinvitation?view=azps-2.6.0) | Create a data share invitation. |
4141
|||
4242

4343
## Next steps

articles/data-share/scripts/powershell/create-view-trigger-powershell.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,8 +42,8 @@ This script uses the following commands:
4242

4343
| Command | Notes |
4444
|---|---|
45-
| [New-AzDataShareTrigger](/powershell/module/az.resources/new-azdatasharetrigger) | Create a share snapshot trigger. |
46-
| [Get-AzDataShareTrigger](/powershell/module/az.resources/get-azdatasharetrigger) | Gets synchronization settings of a share synchronization. |
45+
| [New-AzDataShareTrigger](/powershell/module/az.datashare/new-azdatasharetrigger?view=azps-2.6.0) | Create a share snapshot trigger. |
46+
| [Get-AzDataShareTrigger](/powershell/module/az.datashare/get-azdatasharesynchronizationsetting?view=azps-2.6.0) | Gets synchronization settings of a share synchronization. |
4747
|||
4848

4949
## Next steps

articles/data-share/scripts/powershell/monitor-usage-powershell.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,8 +39,8 @@ This script uses the following commands:
3939

4040
| Command | Notes |
4141
|---|---|
42-
| [Get-AzDataShareSynchronization](/powershell/module/az.resources/get-azdatasharesynchronizationdetails) | List synchronizations on a share. |
43-
| [Get-AzDataShareSynchronizationDetails](/powershell/module/az.resources/get-azdatasharesynchronizationdetails) | Gets synchronization details of a share synchronization. |
42+
| [Get-AzDataShareSynchronization](/powershell/module/az.datashare/get-azdatasharesynchronization?view=azps-2.6.0) | List synchronizations on a share. |
43+
| [Get-AzDataShareSynchronizationDetails](/powershell/module/az.datashare/get-azdatasharesynchronizationdetail?view=azps-2.6.0) | Gets synchronization details of a share synchronization. |
4444
|||
4545

4646
## Next steps

articles/data-share/scripts/powershell/set-view-synchronizations-powershell.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -43,8 +43,8 @@ This script uses the following commands:
4343

4444
| Command | Notes |
4545
|---|---|
46-
| [New-AzDataShareSynchronizationSetting](/powershell/module/az.resources/new-azdatasharesynchronizationsettings) | Create a share synchronization. |
47-
| [Get-AzDataShareSynchronizationSetting](/powershell/module/az.resources/get-azdatasharesynchronizationsetting) | Gets synchronization settings of a share synchronization. |
46+
| [New-AzDataShareSynchronizationSetting](/powershell/module/az.datashare/new-azdatasharesynchronizationsetting?view=azps-2.6.0) | Create a share synchronization. |
47+
| [Get-AzDataShareSynchronizationSetting](/powershell/module/az.datashare/get-azdatasharesynchronizationsetting?view=azps-2.6.0) | Gets synchronization settings of a share synchronization. |
4848
|||
4949

5050
## Next steps

articles/data-share/scripts/powershell/view-sent-invitations-powershell.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ This script uses the following commands:
3737

3838
| Command | Notes |
3939
|---|---|
40-
| [Get-AzDataShareInvitation](/powershell/module/az.resources/get-azdatashareinvitation) | Get and list sent data share invitations. |
40+
| [Get-AzDataShareInvitation](/powershell/module/az.datashare/get-azdatashareinvitation?view=azps-2.6.0) | Get and list sent data share invitations. |
4141
|||
4242

4343
## Next steps

0 commit comments

Comments
 (0)