Privileges Required to use Azure Data Factory
To use Azure Data Factory, you need one of the following:
scheduler-administrator
orredwood-administrator
role.scheduler-user
orredwood-login
role in combination with the following system-wide, partition-wide or object-level privileges.
Built-in Roles
- The
scheduler-administrator
orredwood-administrator
built-in role provides full control over Azure Data Factory. - The
scheduler-viewer
built-in role provides read-only access to Azure Data Factory.
Creating, Modifying, and Deleting Azure Data Factory
You need all of the following privilege ranks to be able to create, modify, and delete Azure Data Factory:
- View or any other rank - on the Redwood_AzureConnections extension point.
- Edit - on AZUConnection.
- Edit - on AZUResGroup.
- Edit - on AZUSubscription.
- Edit - on EXTCertificate.
Using Azure Data Factory
- View or any other rank - on the Redwood_AzureConnections extension point.
- View - on AZUConnection.
- View - on AZUResGroup.
- View - on AZUSubscription.
- View - on EXTCertificate.
- View - on the component's process server.
- JobAdministrator - on the component's queue.
- Submit - on process definitions of the component.
- View - on the REDWOOD.DataFactory library.
See Also
To use Azure Data Factory, you need one of the following:
scheduler-administrator
orredwood-administrator
role.scheduler-user
orredwood-login
role in combination with the following system-wide, partition-wide or object-level privileges.
Built-in Roles
- The
scheduler-administrator
orredwood-administrator
built-in role provides full control over all Azure Data Factory connections.
Creating, Modifying Azure Data Factory Connections
You need all of the following privilege ranks to be able to create and modify Azure Data Factory connections:
- View - on partitions GLOBAL and REDWOOD.
- View - on application REDWOOD.Redwood_DataFactory.
- View - on library REDWOOD.Redwood_DataFactory.
- View - on the existing Azure Data Factory process server and queue, if applicable.
- Create - on process server and queue if a new process server and queue are required.
- Submit - on process definition Sharepoint_Configure.
- Either:
- Create - on credential in the REDWOOD partition if a credential needs to be created.
- Edit - on credential in the REDWOOD partition if a credential needs to be modified.
Using the Azure Data Factory Component
You need all of the following privilege ranks to be able to use an Azure Data Factory connection:
- View - on partitions GLOBAL and REDWOOD.
- View - on application REDWOOD.Redwood_DataFactory.
- View - on REDWOOD.Redwood_DataFactory library.
- Submit - on process definitions REDWOOD.DataFactory_ImportJobTemplate, REDWOOD.DataFactory_ShowPipelines, REDWOOD.DataFactory_RunPipeline, and/or REDWOOD.DataFactory_Template (depending on the functionality you want).
- View - on the process server of the Azure Data Factory connection.
- JobAdministrator - on the queue of the Azure Data Factory component.
- View - on credential in the REDWOOD partition or on the credential to use.
Deleting Azure Data Factory
- View - on partition REDWOOD.
- Delete - on credential in REDWOOD partition.