Skip to content

Commit efa6ae7

Browse files
Merge pull request #227059 from whhender/release-preview-update-purview-share
Release preview update purview share
2 parents b07c8a7 + ebfc22a commit efa6ae7

11 files changed

+81
-49
lines changed

articles/purview/how-to-receive-share.md

Lines changed: 40 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -20,15 +20,15 @@ Microsoft Purview Data Sharing supports in-place data sharing from Azure Data La
2020

2121
* [A Microsoft Purview account](create-catalog-portal.md).
2222
* No Microsoft Purview permission needed to use the updated data sharing SDK. A minimum of Data Reader role on a Microsoft Purview collection to use data sharing user experience in the Microsoft Purview compliance portal. Refer to [Microsoft Purview permissions](catalog-permissions.md) to learn more about the Microsoft Purview collection and roles.
23-
* Your data recipient's Azure sign-in email address, which you'll use to send the invitation to receive a share. The recipient's email alias won't work.
23+
* Your data recipient's Azure sign-in email address, which you use to send the invitation to receive a share. The recipient's email alias won't work.
2424

2525
### Azure Storage account prerequisites
2626

2727
* Your Azure subscription must be registered for the **AllowDataSharing** preview feature. Follow the below steps using Azure portal or PowerShell.
2828

2929
# [Portal](#tab/azure-portal)
3030

31-
1. In the [Azure portal](https://portal.azure.com), select the Azure subscription that you'll use to create the source and target storage account.
31+
1. In the [Azure portal](https://portal.azure.com), select the Azure subscription that you use to create the source and target storage account.
3232
1. From the left menu, select **Preview features** under *Settings*.
3333
1. Select **AllowDataSharing** and *Register*.
3434
1. Refresh the *Preview features* screen to verify the *State* is **Registered**. It could take 15 minutes to 1 hour for registration to complete.
@@ -47,7 +47,7 @@ Microsoft Purview Data Sharing supports in-place data sharing from Azure Data La
4747
```
4848
The *RegistrationState* should be **Registered**. It could take 15 minutes to 1 hour for registration to complete. For more information, see the [register preview feature article](../azure-resource-manager/management/preview-features.md?tabs=azure-portal#register-preview-feature).
4949
50-
* A target storage account **created after** the registration step is completed. **The target storage account must be in the same Azure region as the source storage account.** If you don't know the Azure region of the source storage account, you'll be able to find out during the share attaching step later in the process. Target storage account can be in a different Azure region from your Microsoft Purview account.
50+
* A target storage account **created after** the registration step is completed. **The target storage account must be in the same Azure region as the source storage account.** If you don't know the Azure region of the source storage account, you can find out during the share attaching step later in the process. Target storage account can be in a different Azure region from your Microsoft Purview account.
5151
5252
> [!IMPORTANT]
5353
> The target storage account must be in the same Azure region as the source storage account.
@@ -59,10 +59,10 @@ Microsoft Purview Data Sharing supports in-place data sharing from Azure Data La
5959
> - Performance: Standard
6060
> - Redundancy options: LRS, GRS, RA-GRS
6161
62-
* You'll need the **Contributor** or **Owner** or **Storage Blob Data Owner** or **Storage Blob Data Contributor** role on the target storage account. You can find more details on the [ADLS Gen2](register-scan-adls-gen2.md#data-sharing) or [Blob storage](register-scan-azure-blob-storage-source.md#data-sharing) data source pages.
62+
* You need the **Contributor** or **Owner** or **Storage Blob Data Owner** or **Storage Blob Data Contributor** role on the target storage account. You can find more details on the [ADLS Gen2](register-scan-adls-gen2.md#data-sharing) or [Blob storage](register-scan-azure-blob-storage-source.md#data-sharing) data source pages.
6363
* If the target storage account is in a different Azure subscription than the one for Microsoft Purview account, the Microsoft.Purview resource provider needs to be registered in the Azure subscription where the Storage account is located. It's automatically registered at the time of share consumer attaching the share and if the user has permission to do the `/register/action` operation and therefore, Contributor or Owner roles to the subscription where the Storage account is located.
6464
This registration is only needed the first time when sharing or receiving data into a storage account in the Azure subscription.
65-
* A storage account needs to be registered in the collection where you'll receive the share. For instructions to register, see the [ADLS Gen2](register-scan-adls-gen2.md) or [Blob storage](register-scan-azure-blob-storage-source.md) data source pages. This step is not required to use the SDK.
65+
* A storage account needs to be registered in the collection where you'll receive the share. For instructions to register, see the [ADLS Gen2](register-scan-adls-gen2.md) or [Blob storage](register-scan-azure-blob-storage-source.md) data source pages. This step isn't required to use the SDK.
6666
* Latest version of the storage SDK, PowerShell, CLI and Azure Storage Explorer. Storage REST API version must be February 2020 or later.
6767
6868
## Receive share
@@ -101,26 +101,48 @@ This registration is only needed the first time when sharing or receiving data i
101101
102102
1. You can access shared data from the target storage account through Azure portal, Azure Storage Explorer, Azure Storage SDK, PowerShell or CLI. You can also analyze the shared data by connecting your storage account to Azure Synapse Analytics Spark or Databricks.
103103
104-
When a share is attached, a new asset of type received share is ingested into the Microsoft Purview catalog, in the same collection as the storage account to which you attached the share is registered to. Refer to [microsoft Purview data sharing lineage](how-to-lineage-purview-data-sharing.md) to learn more about share assets and data sharing lineage.
104+
When a share is attached, a new asset of type received share is ingested into the Microsoft Purview catalog, in the same collection as the storage account to which you attached the share is registered to. Refer to [Microsoft Purview Data Sharing lineage](how-to-lineage-purview-data-sharing.md) to learn more about share assets and data sharing lineage.
105105
106106
> [!NOTE]
107107
> Shares attached using the SDK without registering the storage account with Microsoft Purview will not be ingested into the catalog. User can register their storage account if desired. If a storage account is un-registered or re-registered to a different collection, share assets of that storage account continue to be in the initial collection.
108108
109109
## Update received share
110110
111-
Once you attached a share, you can edit the received share name, or stop the sharing relationship by deleting the received share.
111+
Once you attached a share, you can edit the received share name, [reattach the share to a new storage account](#reattach-share), or stop the sharing relationship by [deleting the received share](#delete-received-share).
112112
113-
You can also re-attach a received share to a different storage account or to a different path in the storage account to which it is already attached to. To re-attach, first select the received share, and then specify a target data store, path and folder where you want to access the shared data. Once you confirm your selection, it will take a few minutes for the attach activity to complete, and then you will see the shared data in your target data store.
113+
You can find and edit received asset one of two ways:
114+
115+
* Access the blob storage or ADLS Gen2 asset where the data was received in the data catalog and open it, then select **Data Share** and **Manage data shares**. There you'll be able to see all the shares for that asset. Select the **Received shares** tab, select a share, and then select your share.
116+
117+
:::image type="content" source="./media/how-to-receive-share/manage-data-shares.png" alt-text="Screenshot of the blob storage account where the share was received, with Data Share select and Manage data shares highlighted." border="true":::
118+
119+
:::image type="content" source="./media/how-to-receive-share/manage-received-share.png" alt-text="Screenshot of the list of received data shares, showing the name of the share highlighted." border="true":::
120+
121+
* [Search](how-to-search-catalog.md) or [browse](how-to-browse-catalog.md) the data catalog for data share assets and select your received share. Then select the **Edit** button.
122+
123+
:::image type="content" source="./media/how-to-receive-share/search-for-share.png" alt-text="Screenshot of the data catalog search, showing the data share filter selected and a share highlighted." border="true":::
124+
125+
## Reattach share
126+
127+
After you've selected your data share to edit, you can reattach the share to a new storage account or path in your current storage account by selecting a storage account, providing a path, and providing the folder.
128+
129+
:::image type="content" source="./media/how-to-receive-share/reattach-share.png" alt-text="Screenshot of the data share reattachment window, showing a new storage account selected and a path and folder added." border="true":::
130+
131+
If you're updating the target, select **Attach to target** to save your changes. Attaching can take a couple minutes to complete after the process has been started.
114132
115133
> [!NOTE]
116-
> While re-attaching, if you selected a storage account that is registered to a collection that you don't have permissions to or a storage account that is not registered in Microsoft Purview, you will be shown the appropriate message. You will see the shared data in your target data store.
134+
> While re-attaching, if you selected a storage account that is registered to a collection that you don't have permissions to or a storage account that is not registered in Microsoft Purview, you will be shown the appropriate message. You will see the shared data in your target data store.
117135
118136
119137
## Delete received share
120138
121-
To delete a *received share*, select the share and then select **Delete**.
139+
To delete a *received share*, [select the share](#update-received-share) and then select **Delete**.
140+
141+
:::image type="content" source="./media/how-to-receive-share/delete-from-manage.png" alt-text="Screenshot of the list of received shares, with a share selected and the delete button highlighted." border="true":::
142+
143+
:::image type="content" source="./media/how-to-receive-share/delete-from-asset.png" alt-text="Screenshot of a received share asset, with the delete button highlighted." border="true":::
122144
123-
Deleting a received share will stop the sharing relationship, and you'll no longer be able to access shared data. Deleting a received share can take a few minutes.
145+
Deleting a received share stops the sharing relationship, and you won't be able to access shared data. Deleting a received share can take a few minutes.
124146
125147
## Guest user verification
126148
@@ -145,13 +167,16 @@ Here are some common issues for receiving share and how to troubleshoot them.
145167
If you're getting an error related to *quota* when creating a Microsoft Purview account, it means your organization has exceeded [Microsoft Purview service limit](how-to-manage-quotas.md). If you require an increase in limit, contact support.
146168
147169
### Can't find my Storage account asset in the Catalog
148-
* Data source is not registered in Microsoft Purview. Refer to the registration steps for [Blob Storage](register-scan-azure-blob-storage-source.md) and [ADLSGen2](register-scan-adls-gen2.md) respectively. Performing a scan is not necessary.
149-
* Data source is registered to a Microsoft Purview collection that you do not have a minimum of Data Reader permission to. Refer to [Microsoft Purview catalog permissions](catalog-permissions.md) and reach out to your collection admin for access.
170+
171+
* Data source isn't registered in Microsoft Purview. Refer to the registration steps for [Blob Storage](register-scan-azure-blob-storage-source.md) and [ADLSGen2](register-scan-adls-gen2.md) respectively. Performing a scan isn't necessary.
172+
* Data source is registered to a Microsoft Purview collection that you don't have a minimum of Data Reader permission to. Refer to [Microsoft Purview catalog permissions](catalog-permissions.md) and reach out to your collection admin for access.
150173
151174
### Can't view list of shares in the storage account asset
175+
152176
* Permission issue to the data store that you want to see shares of. You need a minimum of **Reader** role on the source storage account to see a read-only view of sent shares and received shares. You can find more details on the [ADLS Gen2](register-scan-adls-gen2.md#data-sharing) or [Blob storage](register-scan-azure-blob-storage-source.md#data-sharing) data source page.
153177
154178
### Can't view received share in the storage account asset
179+
155180
* You may have selected a different storage account to attach the share to, that may not be registered in Microsoft Purview or maybe registered to a collection you don't have permissions to. Refer to the registration steps for [Blob Storage](register-scan-azure-blob-storage-source.md) and [ADLSGen2](register-scan-adls-gen2.md) respectively. Refer to [Microsoft Purview catalog permissions](catalog-permissions.md) and reach out to your collection admin for access to collections.
156181
157182
### Can't view share invite
@@ -165,7 +190,7 @@ If you've been notified that you've received a share, but can't view share invit
165190
166191
### Can't see target storage account in the list when attaching a share
167192
168-
When you attach a share to a target, if your storage account isn't listed for you to select, it's likely due to the following reasons: You do not have required permissions to the storage account. Check [prerequisite](#prerequisites-to-receive-shared-data) for details on required storage permissions.
193+
When you attach a share to a target, if your storage account isn't listed for you to select, it's likely due to the following reasons: You don't have required permissions to the storage account. Check [prerequisite](#prerequisites-to-receive-shared-data) for details on required storage permissions.
169194
170195
### Failed to attach share
171196
@@ -183,7 +208,7 @@ If you can't access shared data, it's likely due to the following reasons:
183208
* After share attaching is successful, it may take some time for the data to appear in the target data store. Try again in a few minutes. Likewise, after you delete a share, it may take a few minutes for the data to disappear in the target data store.
184209
* You're accessing shared data using a storage API version prior to February 2020. Only storage API version February 2020 and later are supported for accessing shared data. Ensure you're using the latest version of the storage SDK, PowerShell, CLI and Azure Storage Explorer.
185210
* You're accessing shared data using an analytics tool that uses a storage API version prior to February 2020. You can access shared data from Azure Synapse Analytics Spark and Databricks. You won't be able to access shared data using Azure Data Factory, Power BI or AzCopy.
186-
* You’re accessing shared data using ACLs. ACL isn't supported for accessing shared data. You can use RBAC instead.
211+
* You’re accessing shared data using ACLs. ACL isn't supported for accessing shared data. You can use RBAC permissions instead.
187212
188213
## Next steps
189214

articles/purview/how-to-share-data.md

Lines changed: 18 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -104,33 +104,38 @@ This registration is only needed the first time when sharing or receiving data i
104104
105105
You've now created your share. The recipients of your share will receive an invitation and they can view the pending share in their Microsoft Purview account.
106106
107-
When a share is created, a new asset of type sent share is ingested into the Microsoft Purview catalog, in the same collection as the storage account from which you created the share. Refer to [microsoft Purview data sharing lineage](how-to-lineage-purview-data-sharing.md) to learn more about share assets and data sharing lineage.
107+
When a share is created, a new asset of type sent share is ingested into the Microsoft Purview catalog, in the same collection as the storage account from which you created the share. Refer to [Microsoft Purview data sharing lineage](how-to-lineage-purview-data-sharing.md) to learn more about share assets and data sharing lineage.
108108
109109
> [!NOTE]
110110
> Shares created using the SDK without registering the storage account with Microsoft Purview will not be ingested into the catalog. User can register their storage account if desired. If a storage account is un-registered or re-registered to a different collection, share assets of that storage account continue to be in the initial collection.
111111
112112
## Update a sent share
113113
114-
Once a share is created, you can update description, assets and recipients.
114+
Once a share is created, you can update description, assets, and recipients.
115115
116-
You'll do this from the Blob Storage or ADLSGen2 asset, just like when you created the data share.
116+
> [!NOTE]
117+
> If you only have the **Reader** role on the source storage account, you will be able to view list of sent shares and received shares but not edit. You can find more details on the [ADLS Gen2](register-scan-adls-gen2.md#data-sharing) or [Blob storage](register-scan-azure-blob-storage-source.md#data-sharing) data source page.
117118
118-
Search for your Blob storage or ADLSGen2 asset in the data catalog, open it, then select **Data Share** and **Manage data shares**. There you'll be able to see all the shares for that asset.
119+
You can find your sent shares one of two ways:
119120
120-
> [!NOTE]
121-
> If you have the **Reader** role only on the source storage account, you will be able to view list of sent shares and received shares and not edit. You can find more details on the [ADLS Gen2](register-scan-adls-gen2.md#data-sharing) or [Blob storage](register-scan-azure-blob-storage-source.md#data-sharing) data source page.
121+
* Access the blob storage or ADLS Gen2 asset in the data catalog, open it, then select **Data Share** and **Manage data shares**. There you'll be able to see all the shares for that asset. Select a share, and then select the **Edit** option.
122+
123+
:::image type="content" source="./media/how-to-share-data/manage-data-shares.png" alt-text="Screenshot of a data asset in the Microsoft Purview governance portal with the Manage data shares button highlighted." border="true":::
124+
125+
:::image type="content" source="./media/how-to-share-data/select-share-to-edit.png" alt-text="Screenshot of the Manage data shares page with a share selected and the edit button highlighted." border="true":::
126+
127+
* You can [search](how-to-search-catalog.md) or [browse](how-to-browse-catalog.md) for the share in the data catalog, and narrow results to only data shares. Then select the **Edit** button.
122128
123-
:::image type="content" source="./media/how-to-share-data/manage-data-shares.png" alt-text="Screenshot of a data asset in the Microsoft Purview governance portal with the Manage data shares button highlighted." border="true":::
129+
:::image type="content" source="./media/how-to-share-data/search-for-share.png" alt-text="Screenshot of the data catalog search, showing the data share filter selected and a share highlighted." border="true":::
124130
125-
Select a share, and then select the **Edit** option.
131+
:::image type="content" source="./media/how-to-share-data/edit-share-asset.png" alt-text="Screenshot of a data share asset, with the edit button highlighted." border="true":::
126132
127-
:::image type="content" source="./media/how-to-share-data/select-share-to-edit.png" alt-text="Screenshot of the Manage data shares page with a share selected and the edit button highlighted." border="true":::
128133
129-
From here you can:
134+
From either of these places you can:
130135
131-
- [Edit details](#edit-details)
132-
- [Edit assets](#edit-assets)
133-
- [Edit recipients](#edit-recipients)
136+
- [Edit share details](#edit-details)
137+
- [Edit shared assets](#edit-assets)
138+
- [Edit share recipients](#edit-recipients)
134139
- [Delete your share](#delete-share)
135140
136141
### Edit details
62.6 KB
Loading
39.4 KB
Loading
78.3 KB
Loading
39.4 KB
Loading
76.6 KB
Loading
107 KB
Loading
62.5 KB
Loading
102 KB
Loading

0 commit comments

Comments
 (0)