We have different resources (storage account, logic app, SQL database, SQL server, Synapse Workspace) under a directory and a subscription (let's call them directory_1 and subscription_1)
The resources are used to perform simple ETL pipelines.
We want to move all these resources to a new directory and subscription (directory_2, subscription_2), everything moves correctly except the Synapse Worksapce.
When we try to access it shows this error:
Failed to load one or more resources due to no access, error code 403.
Pipeline
Related service
Trigger
Data flow
Dataset
Credentials
SQL script
Spark job definition
Synapse KQL Scripts
Notebook
Lake databases
Both accounts (from directory_1 and Directory_2) have [Owner] and [Contributor] roles for the Azure Synapse Workspace and the resources group as well.
Any idea how to fix this?
Unfortunately, you cannot transfer an entire Azure Synapse Analytics workspace to another subscription.
Before moving Azure resources to another Subscription, check whether the resource type supports move operation or not by checking this Microsoft Doc
According to this, Microsoft won’t support move operation of Azure Synapse workspace to another resource group or subscription or region.
This may be the reason behind getting that error.
I recommend you to upvote the request submitted by another Azure customer in the below forum.
Transfer an entire Azure Synapse Analytics workspace to another subscription · Community
Reference:
Transfer an entire Azure Synapse Analytics workspace to another subscription - Microsoft Q&A
Related
I want to create an SQL Endpoint as per the documentation:
https://learn.microsoft.com/en-us/azure/databricks/sql/admin/sql-endpoints
However this option does not appear in the databricks assets drop down:
Why not and how can I enable SQL Endpoints in my Azure Databricks instance?
Requirements
Your Azure Databricks account must be on the Premium plan.
Launch a workspace. You can use an existing workspace or create a new one
You must be an Azure Databricks admin. Ref
There could be several reasons for that:
(most probable) administrators didn't give you access to Databricks SQL - they need to follow the documentation to enable it for users or groups.
your workspace is not on Premium plan (requirements in docs)
Is there a way to access the metadata of Azure Data Catalog? I looked up the documentation and went through the Azure Activity log of Azure Data Catalog. However, it seems like there is no access activities(i.e. who accessed Azure Data Catalog at what point of time) log I can use. Is there such activity anywhere in Azure at the moment?
Unfortunately there is no such way to check the activity logs. I would recommend you to please have a look at Azure Purview which has updated Data Catalog features.
You can refer to this document which has describes how to configure metrics, alerts, and diagnostic settings for Azure Purview using Azure Monitor: Azure Purview metrics in Azure Monitor
I am attempting to spin up an azure synapse pool in terraform. At present from the documentation found at: https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/synapse_sql_pool, it appears you have to use a synapse workspace, which also includes a datafactory integration and powerbi, etc.
Right now we just want to datawarehouse not all the other bells and whistles. As you can see within the Azure Portal, you are free to spin up a synapse analytics DW with or without a workspace (see the right image in the box, "formerly SQL DW"):
When you spin that up, you simply have a standalone DW...
Any insight on just getting the datawarehouse as you can in the portal without the workspace and realted?
I am not a Terraform guy. As for Synapse, you are referring to the new one that is in preview. The new one has the workspace which supports SQL pools, Sparks clusters and Pipelines. Although they are supported, they are not created when you deploy a Synapse workspace.
So you can go ahead and created the workspace and one SQL Pool and you will get what you're looking for: the data warehouse engine, named SQL Pool.
Some extra notes: there are 2 types of SQL data warehouse in Synapse Analytics: SQL Pools and SQL on demand. The first one is provisioned computing and is the traditional one with all the features. SQL on demand is still in preview, doesn't have all the features and is charged by the terabyte processed by your queries.
Happy data crunching!
The client 'abc#abc.com' with object id 'abcabcabcabcabc' does not
have authorization to perform action
'Microsoft.Resources/deployments/write' over scope
'/subscriptions/abcabcabc/resourcegroups/abc-01-east/providers/Microsoft.Resources/deployments/publishing-123123123123'
I was trying to create a pipeline using azure data factory to pull data from sql-server to azure blob, but i am facing the above issue while i was trying to use my integration runtime which already exsist in my azure portal.
At present I have data factory contributor role assigned to me, what other roles should I have to avoid this issue?
I had a similar issue being a contributor for an ADF. With this role, you seem to be able to open the ADF UI, but the moment you try to publish anything, you get the above error. Making me a data factory contributor for that ADF didn't help.
What did help was making me a data factory contributor on the resource group level. So go to the resource group that contains the ADF, go to IAM and add you as a data factory contributor.
I also noticed, you need to close the data factory ui before IAM changes take effect.
Azure's roles are a bit of a mystery to me so it would be useful if someone could provide an explanation of how and why.
Steps
1 - Register an Enterprise APP in your Azure Active Directory
2 - Create a key in the Enterprise APP and save the value somewhere
3 - Go to your Azure SQL Database through Management Console and
CREATE USER [your application name] FROM EXTERNAL PROVIDER;
4 - Change the authentication method for Principal and use the application id and key on the form
For more information:
https://learn.microsoft.com/en-us/azure/data-factory/connector-azure-sql-database
Is there any way to change the region for a Azure SQL server/database from one geographical region to another region?
I have a deleted database which I cannot restore as I get "MSDN subscriptions are restricted from provisioning in this region. Please choose a different region. For exceptions to this rule please contact Microsoft Support."
The Server was originally setup in US-West region with a VS MSDN Subscription.
To answer the ways to change region from Azure SQL database, there are mutiple options -
Configure active geo-replication for Azure SQL Database in the Azure portal and initiate failover
Copy an Azure SQL database
Export an Azure SQL database to a BACPAC file
Set up SQL Data Sync (Preview)
However, based on the error if there is limitation on specific region and you have strict requirement to have database in same region you may need to work with Azure support on it.