Azure Purview API - Service principal unauthorized

CSTX_a_KDEVESH 41 Reputation points
2021-08-31T17:10:44.067+00:00

I am using Azure Purview Atlas API https://<name>.catalog.purview.azure.com/api/atlas/v2/types/typedefs in Databricks to get type definitions.

I have provided all the required roles for Service Principal in Azure Purview:

  • Purview Data curator
  • Purview Data reader
  • Purview Data source administrator

Note - I am using existing service principal (cannot create new service principal currently)

127909-image.png

Microsoft Documentation States -
127985-image.png

Why can't we use existing service principal, is there any workaround?

Microsoft Purview
Microsoft Purview
A Microsoft data governance service that helps manage and govern on-premises, multicloud, and software-as-a-service data. Previously known as Azure Purview.
1,028 questions
0 comments
Accepted answer
  1. KranthiPakala-MSFT 46,437 Reputation points Microsoft Employee
    2021-09-01T06:45:49.207+00:00

    Hi @CSTX_a_KDEVESH ,

    Thanks for using Microsoft Q&A forum and posting your query.

    Is this an account created after 8/18/21 or before as the role assignments have changed from IAM store to Purview Studio (collections). So the recommendation is to make that service principal a collection admin at the root collection. This doc explains how to assign that data plane role.

    MS doc: https://video2.skills-academy.com/azure/purview/how-to-create-and-manage-collections#add-roles-and-restrict-access-through-collections

    Once that step is done, this error will disappear.

    I am working with internal team to update the REST API document with latest info as the existing service principal should not make any difference.

    Hope this info helps. Do let us know how it goes.

    ----------

    • Please accept an answer if correct. Original posters help the community find answers faster by identifying the correct answer. Here is how.
    • Want a reminder to come back and check responses? Here is how to subscribe to a notification.
    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest