🖌️
IAMTableau
  • Welcome friends*
  • User Access
    • Recipe: OneLogin with Tableau
    • Okta apps and Tableau
    • Recipe: Azure AD and Tableau (requires product updates since 2022)
  • Tableau Server, SAML Certificates, namespaces and my memory...
  • Tableau Server Independent Gateway into the DMZ
  • DATA ACCESS
    • Recipe: SharePoint Lists and ADFS
  • Identity
  • sAMAccountName & userPrincipalName
  • Terraform
    • Unattended installs in Azure with Terraform
    • Notes: Terrazure next steps
    • Notes: Terraform modules
  • Useful Links
    • My 'go to' resources...
    • My lab setup
  • Notes
  • Notes: Okta OAuth Integration
  • Notes: Azure Synapse
  • Notes: Azure AD Domain Services
  • Drafts
    • Draft: Kerberos Constrained Delegation
Powered by GitBook
On this page

Notes: Azure Synapse

PreviousNotes: Okta OAuth IntegrationNextNotes: Azure AD Domain Services

Last updated 3 years ago

Was this helpful?

CtrlK
  • Quickstart tutorial
  • Concepts
  • Username and Password
  • Tested Connecting with OAuth
  • SQL Roles and Permissions
  • App Registration

Was this helpful?

Quickstart tutorial

Notes:

What is abfss ? (https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-abfs-driver)

  • https://contosolake.dfs.core.windows.net/users/NYCTripSmall.parquet

  • abfss://users@contosolake.dfs.core.windows.net/NYCTripSmall.parquet

Concepts

Username and Password

DATA_SOURCE = 'TabLake',

data_explorer WITH PASSWORD = 'My Very Strong Password that I like to use all the time, everywhere';

DataExplorationDB

tab-synapses-ondemand.sql.azuresynapse.net

Tested Connecting with OAuth

Basic Admin setup:

Best Practice:

SQL Roles and Permissions

Database users (with the exception of administrators) cannot be created using the Azure portal. Azure roles are not propagated to the database in SQL Database, the SQL Managed Instance, or Azure Synapse. Azure roles are used for managing Azure Resources, and do not apply to database permissions. For example, the SQL Server Contributor role does not grant access to connect to the database in SQL Database, the SQL Managed Instance, or Azure Synapse. The access permission must be granted directly in the database using Transact-SQL statements.

To create a contained database user representing an Azure AD or federated domain group, provide the display name of a security group:

CREATE USER [ICU Nurses] FROM EXTERNAL PROVIDER;

App Registration

Default API Permissions on New App Registration

Testing out Admin Consent:

Quickstart: Get started - create a Synapse workspace - Azure Synapse Analyticsdocsmsft
Logo
Troubleshoot Azure Data Factory Studio - Azure Data Factorydocsmsft
Tutorial: Get started analyze data with a serverless SQL pool - Azure Synapse Analyticsdocsmsft
Copy and transform data in Azure Data Lake Storage Gen2 - Azure Data Factory & Azure Synapsedocsmsft
Quickstart: Get started add an Administrator - Azure Synapse Analyticsdocsmsft
What is a server in Azure SQL Database and Azure Synapse Analytics?docsmsft
Logo
Logo
Logo
Logo
Logo
How to set up access control for your Synapse workspace - Azure Synapse Analyticsdocsmsft
Logo
[Recorded Webcast] Tableau and Microsoft Azure Synapse AnalyticsThorogood
SQL on-demand pools in Azure Synapse AnalyticsSQL Shack - articles about database auditing, server performance, data recovery, and more
Logo
Logo
Connecting using Azure Active Directory authentication - JDBC Driver for SQL Serverdocsmsft
Logo
Configure Azure Active Directory authentication - Azure SQL Database & SQL Managed Instance & Azure Synapse Analyticsdocsmsft
Error "Authentication failed" When Connecting to Azure Data Lake Storage Gen2 | Tableau Software
Logo
Configure Azure Active Directory authentication - Azure SQL Database & SQL Managed Instance & Azure Synapse Analyticsdocsmsft
Logo