> For the complete documentation index, see [llms.txt](https://johnthompson365.gitbook.io/iamtableau/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://johnthompson365.gitbook.io/iamtableau/notes-azure-synapse.md).

# Notes: Azure Synapse

### Quickstart tutorial 

{% embed url="<https://docs.microsoft.com/en-us/azure/synapse-analytics/get-started-create-workspace>" %}

{% embed url="<https://docs.microsoft.com/en-us/azure/data-factory/data-factory-ux-troubleshoot-guide#third-party-cookies-blocked>" %}

Notes:

What is abfss ? (<https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-abfs-driver>)

* `https://contosolake.dfs.core.windows.net/users/NYCTripSmall.parquet`
* `abfss://users@contosolake.dfs.core.windows.net/NYCTripSmall.parquet`

{% embed url="<https://docs.microsoft.com/en-us/azure/synapse-analytics/get-started-analyze-sql-on-demand>" %}

{% embed url="<https://docs.microsoft.com/en-us/azure/data-factory/connector-azure-data-lake-storage>" %}

### Concepts

{% embed url="<https://docs.microsoft.com/en-us/azure/azure-sql/database/logical-servers>" %}

### Username and Password

DATA\_SOURCE = 'TabLake',

data\_explorer WITH PASSWORD = 'My Very Strong Password that I like to use all the time, everywhere';

DataExplorationDB

tab-synapses-ondemand.sql.azuresynapse.net

![](https://3088636806-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MTNc1yqFWMiF2_FfNrL%2F-MZoVLG_48wH0HA5pCtI%2F-MZoYgXY8mnKau9l_4om%2Fimage.png?alt=media\&token=cd92c6c8-24d5-4c6c-b61d-ed9f3655c04b)

### Tested Connecting with OAuth

Basic Admin setup:

{% embed url="<https://docs.microsoft.com/en-us/azure/synapse-analytics/get-started-add-admin>" %}

Best Practice:

{% embed url="<https://docs.microsoft.com/en-us/azure/synapse-analytics/security/how-to-set-up-access-control>" %}

{% embed url="<https://kb.tableau.com/articles/issue/Error-Authentication-failed-When-Connecting-to-Azure-Data-Lake-Storage-Gen2>" %}

![](https://3088636806-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MTNc1yqFWMiF2_FfNrL%2F-M_SqTRA0BI5sbBZJsur%2F-M_Sqt8HUY6q5jZOT7fS%2Fimage.png?alt=media\&token=77d5e4cb-b322-467e-bfa5-f673980b4956)

![](https://3088636806-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MTNc1yqFWMiF2_FfNrL%2F-M_SqTRA0BI5sbBZJsur%2F-M_Srh1pUYxjWYcXG6Aj%2Fimage.png?alt=media\&token=c7000979-7d66-4a0f-8a0b-e9715a72985e)

![](https://3088636806-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MTNc1yqFWMiF2_FfNrL%2F-M_StwDFlBrWEw1ms8tf%2F-M_Sv9djgVUjFTIyKf4F%2Fimage.png?alt=media\&token=9f1970e2-7e8f-462d-8b78-fe19d7ceeff6)

{% embed url="<https://www.thorogood.com/webcasts/2020-07-30-tableau-and-azure/>" %}

{% embed url="<https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell>" %}

{% embed url="<https://www.sqlshack.com/sql-on-demand-pools-in-azure-synapse-analytics/>" %}

### SQL Roles and Permissions

{% embed url="<https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell#create-contained-users-mapped-to-azure-ad-identities>" %}

> Database users (with the exception of administrators) cannot be created using the Azure portal. Azure roles are not propagated to the database in SQL Database, the SQL Managed Instance, or Azure Synapse. Azure roles are used for managing Azure Resources, and do not apply to database permissions. For example, the **SQL Server Contributor** role does not grant access to connect to the database in SQL Database, the SQL Managed Instance, or Azure Synapse. The access permission must be granted directly in the database using Transact-SQL statements.

To create a contained database user representing an Azure AD or federated domain group, provide the display name of a security group:

```
CREATE USER [ICU Nurses] FROM EXTERNAL PROVIDER;
```

![](https://3088636806-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MTNc1yqFWMiF2_FfNrL%2F-M_qynwM3_BApjBKPob5%2F-M_r-c8p1-nD4XQs4AbK%2Fimage.png?alt=media\&token=41557d40-336a-45d4-be62-11040fb8907c)

{% embed url="<https://docs.microsoft.com/en-us/sql/connect/jdbc/connecting-using-azure-active-directory-authentication?view=sql-server-ver15#connecting-using-access-token>" %}

### App Registration

Default API Permissions on New App Registration

![](https://3088636806-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MTNc1yqFWMiF2_FfNrL%2Fuploads%2FbWrit8IbQiu1BUOIe4i3%2Fimage.png?alt=media\&token=c70a6de6-fb07-4073-8d3d-180c83b4c6f6)

Testing out Admin Consent: