Error: (3835) Purview Failed to access the ADLS Gen2 storage with the Managed Identity

Marcos Chibly 6 Reputation points
2021-09-24T18:22:38.153+00:00

Hello my friends..

Could you help me in this error during purview config datalake gen 2 as a source.

The Managed identity name: pw-poc-brk don't appear in DataLake IAM to setup permission according this MS tutorial https://learn.microsoft.com/pt-br/azure/purview/register-scan-adls-gen2#setting-up-authentication-for-a-scan

135119-image.png
135120-image.png

Azure Data Lake Storage
Azure Data Lake Storage
An Azure service that provides an enterprise-wide hyper-scale repository for big data analytic workloads and is integrated with Azure Blob Storage.
1,349 questions
Microsoft Purview
Microsoft Purview
A Microsoft data governance service that helps manage and govern on-premises, multicloud, and software-as-a-service data. Previously known as Azure Purview.
943 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,568 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. PRADEEPCHEEKATLA-MSFT 77,751 Reputation points Microsoft Employee
    2021-09-27T05:37:04.07+00:00

    Hello @Marcos Chibly ,

    Welcome to the Microsoft Q&A platform.

    You will experience this error message: Error:(3835) Failed to access the ADLS Gen2 Storage with the Managed Identity when you don't have Purview Managed Identity to the Storage Blob Data Reader role for the Azure Data Lake Gen2 storage account.

    135446-image.png

    To resolve this issue, make sure to add Purview Managed Identity to the Storage Blob Data Reader role for the Azure Data Lake Gen2 storage account.

    1. Navigate to your ADLS Gen2 storage account.
    2. Select Access Control (IAM) from the left navigation menu.
    3. Select + Add.
    4. Set the Role to Storage Blob Data Reader
    5. Enter your Azure Purview account name under Select input box.
    6. Then, select Save to give this role assignment to your Purview account.

    135447-image.png

    A few moments later, you will able to connect successfully.

    135357-image.png

    For more details, refer to Register and scan Azure Data Lake Storage Gen2 - Prerequisites.

    Hope this will help. Please let us know if any further queries.

    ------------------------------

    • Please don't forget to click on 130616-image.png or upvote 130671-image.png button whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how
    • Want a reminder to come back and check responses? Here is how to subscribe to a notification
    • If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators