Skip to content

Commit f9b2714

Browse files
Merge pull request #211609 from inward-eye/main
corrected permissions for SQL data sources
2 parents cdfd818 + 967fa2b commit f9b2714

File tree

3 files changed

+13
-12
lines changed

3 files changed

+13
-12
lines changed

articles/purview/how-to-policies-data-owner-arc-sql-server.md

Lines changed: 8 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -166,18 +166,16 @@ This section contains a reference of how actions in Microsoft Purview data polic
166166

167167
| **Microsoft Purview policy action** | **Data source specific actions** |
168168
|-------------------------------------|--------------------------------------|
169-
| | |
169+
|||
170170
| *Read* |Microsoft.Sql/sqlservers/Connect |
171171
||Microsoft.Sql/sqlservers/databases/Connect |
172172
||Microsoft.Sql/Sqlservers/Databases/Schemas/Tables/Rows|
173173
||Microsoft.Sql/Sqlservers/Databases/Schemas/Views/Rows |
174174
|||
175175
| *SQL Performance Monitor* |Microsoft.Sql/sqlservers/Connect |
176176
||Microsoft.Sql/sqlservers/databases/Connect |
177-
||Microsoft.Sql/sqlservers/SystemViewsAndFunctions/ServerMetadata/rows/select |
178-
||Microsoft.Sql/sqlservers/databases/SystemViewsAndFunctions/DatabaseMetadata/rows/select |
179-
||Microsoft.Sql/sqlservers/SystemViewsAndFunctions/ServerState/rows/select |
180-
||Microsoft.Sql/sqlservers/databases/SystemViewsAndFunctions/DatabaseState/rows/select |
177+
||Microsoft.Sql/sqlservers/databases/SystemViewsAndFunctions/DatabasePerformanceState/rows/select |
178+
||Microsoft.Sql/sqlservers/databases/SystemViewsAndFunctions/ServerPerformanceState/rows/select |
181179
|||
182180
| *SQL Security Auditor* |Microsoft.Sql/sqlservers/Connect |
183181
||Microsoft.Sql/sqlservers/databases/Connect |
@@ -187,6 +185,11 @@ This section contains a reference of how actions in Microsoft Purview data polic
187185
||Microsoft.Sql/sqlservers/databases/SystemViewsAndFunctions/DatabaseSecurityMetadata/rows/select |
188186
|||
189187

188+
189+
190+
191+
192+
190193
## Next steps
191194
Check blog, demo and related how-to guides
192195
* [Demo of access policy for Azure Storage](https://learn-video.azurefd.net/vod/player?id=caa25ad3-7927-4dcc-88dd-6b74bcae98a2)

articles/purview/how-to-policies-data-owner-azure-sql-db.md

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -100,18 +100,16 @@ This section contains a reference of how actions in Microsoft Purview data polic
100100

101101
| **Microsoft Purview policy action** | **Data source specific actions** |
102102
|-------------------------------------|--------------------------------------|
103-
| | |
103+
|||
104104
| *Read* |Microsoft.Sql/sqlservers/Connect |
105105
||Microsoft.Sql/sqlservers/databases/Connect |
106106
||Microsoft.Sql/Sqlservers/Databases/Schemas/Tables/Rows|
107107
||Microsoft.Sql/Sqlservers/Databases/Schemas/Views/Rows |
108108
|||
109109
| *SQL Performance Monitor* |Microsoft.Sql/sqlservers/Connect |
110110
||Microsoft.Sql/sqlservers/databases/Connect |
111-
||Microsoft.Sql/sqlservers/SystemViewsAndFunctions/ServerMetadata/rows/select |
112-
||Microsoft.Sql/sqlservers/databases/SystemViewsAndFunctions/DatabaseMetadata/rows/select |
113-
||Microsoft.Sql/sqlservers/SystemViewsAndFunctions/ServerState/rows/select |
114-
||Microsoft.Sql/sqlservers/databases/SystemViewsAndFunctions/DatabaseState/rows/select |
111+
||Microsoft.Sql/sqlservers/databases/SystemViewsAndFunctions/DatabasePerformanceState/rows/select |
112+
||Microsoft.Sql/sqlservers/databases/SystemViewsAndFunctions/ServerPerformanceState/rows/select |
115113
|||
116114
| *SQL Security Auditor* |Microsoft.Sql/sqlservers/Connect |
117115
||Microsoft.Sql/sqlservers/databases/Connect |

articles/purview/includes/access-policies-prerequisites-azure-sql-db.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,10 +18,10 @@ ms.custom:
1818
- Central India
1919

2020
### Azure SQL Database configuration
21-
Azure SQL Database needs an Azure Active Directory Admin to be configured to honor policies from Microsoft Purview. In Azure portal navigate to the Azure SQL Server that hosts the Azure SQL DB and then navigate to Azure Active Directory on the side menu. Set an Admin name and then Save. See screenshot:
21+
Azure SQL Database needs an Azure Active Directory Admin to be configured to honor policies from Microsoft Purview. In Azure portal navigate to the Azure SQL Server that hosts the Azure SQL DB and then navigate to Azure Active Directory on the side menu. Set an Admin name and then select **Save**. See screenshot:
2222
![Screenshot shows how to assign Active Directory Admin to Azure SQL Server.](../media/how-to-policies-data-owner-sql/assign-active-directory-admin-azure-sql-db.png)
2323

24-
Then navigate to Identity on the side menu. Under System assigned managed identity check status to *On* and save. See screenshot:
24+
Then navigate to Identity on the side menu. Under System assigned managed identity check status to *On* and then select **Save**. See screenshot:
2525
![Screenshot shows how to assign system managed identity to Azure SQL Server.](../media/how-to-policies-data-owner-sql/assign-identity-azure-sql-db.png)
2626

2727
You'll also need to enable (and verify) external policy based authorization on the Azure SQL server. You can do this in PowerShell:

0 commit comments

Comments
 (0)