Better together: Register your Azure Synapse workspace in Azure Purview for at scale governance

Published 04-15-2021 12:31 PM 1,463 Views
Microsoft

Azure Purview now supports registering your Azure synapse workspace as a data source. You can scan all the Dedicated and Serverless SQL databases within your workspace in a matter of a few clicks. You can also choose to scan your Synapse workspace under a subscription or resource group data source that you have already registered.

 

Setting up authentication to enumerate resources within your Synapse workspace

 

Navigate to the Resource group or Subscription that the Synapse workspace is in, in the Azure portal and select Access Control (IAM) from the left navigation menu. You must be owner or user access administrator to add a role on the Resource group or Subscription. Select +Add button and set the Reader Role and enter your Azure Purview account name (which represents its MSI) under Select input box. Follow the same steps as above to also add Storage blob data reader Role for the Azure Purview MSI on the resource group or subscription that the Synapse workspace is in.

 

Now, navigate to your Synapse workspace, and under the Data section, click on one of your Serverless SQL databases. Click on the ellipses icon and start a New SQL script. Add the Azure Purview account MSI (represented by the account name) as sysadmin on the serverless SQL databases by running the command below in your SQL script:

 

CREATE LOGIN [PurviewAccountName] FROM EXTERNAL PROVIDER;

ALTER SERVER ROLE sysadmin ADD MEMBER [PurviewAccountName];

 

You must also set up authentication on your Dedicated and Serverless databases to run scans on them. To learn how, read our full documentation here.

 

Register and scan your Azure Synapse data source

 

You can register all your Azure Synapse Analytics (multiple) workspaces.

 

register-synapse-source.png

 

You can set up scans on your Synapse workspace using our secure credential mechanism for authentication.

 

synapse-scan-setup.png

 

You can also select a scan rule set and set up a schedule for your scans.

 

Once your scan completes successfully, you can navigate to source details to view all relevant information pertaining to that source and its scans.

 

synapse-source-details.png

 

synapse-scan-details.png

 

And you can discover assets along with their metadata, schema, and classifications because of these scans on your Synapse workspace, via the Purview catalog.

 

synapseBrowse.PNG

 

Get started today! 

Read our full documentation here today!

1 Comment
Occasional Visitor

Great news!
Is also integration with Databricks something that is coming along the way later this year?

%3CLINGO-SUB%20id%3D%22lingo-sub-2270887%22%20slang%3D%22en-US%22%3EBetter%20together%3A%20Register%20your%20Azure%20Synapse%20workspace%20in%20Azure%20Purview%20for%20at%20scale%20governance%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2270887%22%20slang%3D%22en-US%22%3E%3CP%3EAzure%20Purview%20now%20supports%20registering%20your%20Azure%20synapse%20workspace%20as%20a%20data%20source.%20You%20can%20scan%20all%20the%20Dedicated%20and%20Serverless%20SQL%20databases%20within%20your%20workspace%20in%20a%20matter%20of%20a%20few%20clicks.%20You%20can%20also%20choose%20to%20scan%20your%20Synapse%20workspace%20under%20a%20subscription%20or%20resource%20group%20data%20source%20that%20you%20have%20already%20registered.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--493860962%22%20id%3D%22toc-hId--493860962%22%3ESetting%20up%20authentication%20to%20enumerate%20resources%20within%20your%20Synapse%20workspace%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENavigate%20to%20the%26nbsp%3BResource%20group%26nbsp%3Bor%26nbsp%3BSubscription%26nbsp%3Bthat%20the%20Synapse%20workspace%20is%20in%2C%20in%20the%20Azure%20portal%20and%20select%E2%80%AFAccess%20Control%20(IAM)%E2%80%AFfrom%20the%20left%20navigation%20menu.%20You%20must%20be%20owner%20or%20user%20access%20administrator%20to%20add%20a%20role%20on%20the%20Resource%20group%20or%20Subscription.%20Select%26nbsp%3B%3CEM%3E%2BAdd%3C%2FEM%3E%26nbsp%3Bbutton%20and%20set%20the%26nbsp%3BReader%26nbsp%3BRole%20and%20enter%20your%20Azure%20Purview%20account%20name%20(which%20represents%20its%20MSI)%20under%20Select%20input%20box.%20Follow%20the%20same%20steps%20as%20above%20to%20also%20add%26nbsp%3BStorage%20blob%20data%20reader%26nbsp%3BRole%20for%20the%20Azure%20Purview%20MSI%20on%20the%20resource%20group%20or%20subscription%20that%20the%20Synapse%20workspace%20is%20in.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENow%2C%20navigate%20to%20your%20Synapse%20workspace%2C%20and%20under%20the%26nbsp%3BData%26nbsp%3Bsection%2C%20click%20on%20one%20of%20your%20Serverless%20SQL%20databases.%20Click%20on%20the%20ellipses%20icon%20and%20start%20a%20New%20SQL%20script.%20Add%20the%20Azure%20Purview%20account%20MSI%20(represented%20by%20the%20account%20name)%20as%26nbsp%3Bsysadmin%26nbsp%3Bon%20the%20serverless%20SQL%20databases%20by%20running%20the%20command%20below%20in%20your%20SQL%20script%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CSPAN%20class%3D%22hljs-keyword%22%3ECREATE%3C%2FSPAN%3E%3CSPAN%3E%20LOGIN%20%5BPurviewAccountName%5D%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22hljs-keyword%22%3EFROM%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22hljs-keyword%22%3EEXTERNAL%3C%2FSPAN%3E%3CSPAN%3E%20PROVIDER%3B%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CSPAN%20class%3D%22hljs-keyword%22%3EALTER%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22hljs-keyword%22%3ESERVER%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22hljs-keyword%22%3EROLE%3C%2FSPAN%3E%3CSPAN%3E%20sysadmin%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22hljs-keyword%22%3EADD%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22hljs-keyword%22%3EMEMBER%3C%2FSPAN%3E%3CSPAN%3E%20%5BPurviewAccountName%5D%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EYou%20must%20also%20set%20up%20authentication%20on%20your%20Dedicated%20and%20Serverless%20databases%20to%20run%20scans%20on%20them.%20To%20learn%20how%2C%20read%20our%20full%20documentation%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fpurview%2Fregister-scan-synapse-workspace%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehere%3C%2FA%3E.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-1993651871%22%20id%3D%22toc-hId-1993651871%22%3E%3CSPAN%3ERegister%20and%20scan%20your%20Azure%20Synapse%20data%20source%3C%2FSPAN%3E%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3EYou%20can%20register%20all%20your%3C%2FSPAN%3E%3CSPAN%20style%3D%22font-family%3A%20inherit%3B%22%3E%26nbsp%3B%3C%2FSPAN%3EAzure%20Synapse%20Analytics%20(multiple)%26nbsp%3Bworkspaces.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20image-alt%3D%22register-synapse-source.png%22%20style%3D%22width%3A%20629px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F272585i8F68310838EA8220%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22register-synapse-source.png%22%20alt%3D%22register-synapse-source.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EYou%20can%20set%20up%20scans%20on%20your%20Synapse%20workspace%20using%20our%20secure%20credential%20mechanism%20for%20authentication.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20image-alt%3D%22synapse-scan-setup.png%22%20style%3D%22width%3A%20627px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F272591i54DA0081127BEDD4%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22synapse-scan-setup.png%22%20alt%3D%22synapse-scan-setup.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20can%20also%20select%20a%20scan%20rule%20set%20and%20set%20up%20a%20schedule%20for%20your%20scans.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EOnce%20your%20scan%20completes%20successfully%2C%20you%20can%20navigate%20to%20source%20details%20to%20view%20all%20relevant%20information%20pertaining%20to%20that%20source%20and%20its%20scans.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20image-alt%3D%22synapse-source-details.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F272596i7C3614716E278FF3%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22synapse-source-details.png%22%20alt%3D%22synapse-source-details.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20image-alt%3D%22synapse-scan-details.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F272599i3A322F4E4C7B2C88%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22synapse-scan-details.png%22%20alt%3D%22synapse-scan-details.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAnd%20you%20can%20discover%20assets%20along%20with%20their%20metadata%2C%20schema%2C%20and%20classifications%20because%20of%20these%20scans%20on%20your%20Synapse%20workspace%2C%20via%20the%20Purview%20catalog.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20image-alt%3D%22synapseBrowse.PNG%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F272604iD068DD108F498A51%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22synapseBrowse.PNG%22%20alt%3D%22synapseBrowse.PNG%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%20style%3D%22font-family%3A%20inherit%3B%22%3EGet%20started%20today!%26nbsp%3B%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3ERead%20our%20full%20documentation%3CSPAN%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fpurview%2Fregister-scan-synapse-workspace%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3Ehere%3C%2FA%3E%26nbsp%3B%3C%2FSPAN%3Etoday!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-2270887%22%20slang%3D%22en-US%22%3E%3CP%3EAzure%20Purview%20now%20supports%20registering%20your%20Azure%20synapse%20workspace%20as%20a%20data%20source.%20You%20can%20scan%20all%20the%20Dedicated%20and%20Serverless%20SQL%20databases%20within%20your%20workspace%20in%20a%20matter%20of%20a%20few%20clicks.%20You%20can%20also%20choose%20to%20scan%20your%20Synapse%20workspace%20under%20a%20subscription%20or%20resource%20group%20data%20source%20that%20you%20have%20already%20registered.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2270887%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EAzure%20Purview%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Edata%20catalog%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EData%20Governance%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Co-Authors
Version history
Last update:
‎Apr 13 2021 01:16 PM
Updated by: