Exam DP203 Serverless SQL Pool Authentication: Difference between revisions

Revision as of 23:38, 16 November 2024

Serverless SQL Pool Authentication

Two types of authentication are supported:

SQL Authentication (username and password). Only within the Serverless SQL Pool.
Microsoft Entra authentication. Global reach within Azure.

Authorization refers to what a user can do within a serverless SQL pool database and is controlled by your user account's database role memberships and object-level permissions.

Access to storage accounts

If a user of either type (above) needs to access files in Azure Storage, or Azure Gen2, they must have one of the following permissions to be set up on the Azure Storage and referenced by the user I think:

Anonymous access
Shared access signature (SAS)
Managed Identity.
User Identity

Anonymous access

To access publicly available files placed on Azure storage accounts that allow anonymous access.

Shared Access Signature (SAS)

With a SAS, you can grant clients access to resources in storage account, without sharing account keys.

Managed Identity

Part of Microsoft Entra ID. Analogous to domain groups.

User Identity

Part of Microsoft Entra ID. Analogous to domain users.

Configuration

In Synapse Studio, go to Manage - Access Control

This lists the users, including NeilM the user I am logged on as.

Click Add, to Add role assignment. In the Role pop-up list select the "Synapse Administrator" role. In the Select User pop-up list, enter the user who you want to make a member of this role.

@@ Line 25: / Line 25: @@
 == User Identity ==
 Part of Microsoft Entra ID. Analogous to domain users.
+== Configuration ==
+In Synapse Studio, go to '''Manage''' - '''Access Control'''
+This lists the users, including NeilM the user I am logged on as.
+Click '''Add''', to '''Add role assignment'''. In the '''Role''' pop-up list select the "Synapse Administrator" role. In the Select User pop-up list, enter the user who you want to make a member of this role.