Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
In this tutorial, you'll learn how to add an administrator to your Synapse workspace. This user has full control over the workspace.
Overview
So far in the get started guide, we've focused on activities you do in the workspace. Because you created the workspace in STEP 1, you're an administrator of the Synapse workspace. Now, we'll make another user Ryan ([email protected]
) an administrator. When we're done, Ryan will be able to do everything you can do in the workspace.
Azure role-based access control: Owner role for the workspace
Open the Azure portal and open your Synapse workspace.
On the left side, select Access control (IAM).
Select Add > Add role assignment to open the Add role assignment page.
Assign the following role. For detailed steps, see Assign Azure roles using the Azure portal.
Setting Value Role Owner Assign access to USER Member [email protected] Select Save.
Synapse role-based access control: Synapse Administrator role for the workspace
Assign to [email protected]
to the Synapse Administrator role on the workspace.
- Open your workspace in Synapse Studio.
- On the left side, select Manage to open the Manage hub.
- Under Security, select Access control.
- Select Add.
- Leave Scope set to Workspace.
- Add
[email protected]
to the Synapse Administrator role. - Then select Apply.
Azure role-based access control: Role assignments on the workspace's primary storage account
Open the workspace's primary storage account in the Azure portal.
On the left side, select Access control (IAM).
Select Add > Add role assignment to open the Add role assignment page.
Assign the following role. For detailed steps, see Assign Azure roles using the Azure portal.
Setting Value Role 1 Owner Role 2 Azure Storage Blob Data Contributor Assign access to USER Member [email protected]
Dedicated SQL pools: db_owner role
Assign [email protected]
to the db_owner on each dedicated SQL pool in the workspace.
CREATE USER [[email protected]] FROM EXTERNAL PROVIDER;
EXEC sp_addrolemember 'db_owner', '[email protected]'