issue in azure pipeline using azure data factory to pull data from sql-server to azure blob

Question

The client 'abc@abc.com' with object id 'abcabcabcabcabc' does not have authorization to perform action 'Microsoft.Resources/deployments/write' over scope '/subscriptions/abcabcabc/resourcegroups/abc-01-east/providers/Microsoft.Resources/deployments/publishing-123123123123'

I was trying to create a pipeline using azure data factory to pull data from sql-server to azure blob, but i am facing the above issue while i was trying to use my integration runtime which already exsist in my azure portal.

At present I have data factory contributor role assigned to me, what other roles should I have to avoid this issue?

Answer 1

I had a similar issue being a contributor for an ADF. With this role, you seem to be able to open the ADF UI, but the moment you try to publish anything, you get the above error. Making me a data factory contributor for that ADF didn't help.

What did help was making me a data factory contributor on the resource group level. So go to the resource group that contains the ADF, go to IAM and add you as a data factory contributor.

I also noticed, you need to close the data factory ui before IAM changes take effect.

Azure's roles are a bit of a mystery to me so it would be useful if someone could provide an explanation of how and why.

Answer 2

Steps

1 - Register an Enterprise APP in your Azure Active Directory

2 - Create a key in the Enterprise APP and save the value somewhere

3 - Go to your Azure SQL Database through Management Console and

CREATE USER [your application name] FROM EXTERNAL PROVIDER;

4 - Change the authentication method for Principal and use the application id and key on the form

For more information:

https://docs.microsoft.com/en-us/azure/data-factory/connector-azure-sql-database