question

catflyinginsectant-4945 avatar image
0 Votes"
catflyinginsectant-4945 asked catflyinginsectant-4945 commented

Provide cancel access on a specific pipeline in ADF

Hello Team,
This is related to thread https://docs.microsoft.com/en-us/answers/questions/43496/provide-trigger-access-on-a-specific-pipeline-in-a.html.
The thread above can give trigger access on a specific pipeline.
However, is there a way that can give user cancel permission on the specific pipeline as well?
Like if user is granted to trigger P1 pipeline, and during P1 is running, can user cancel that?
Thank you in advance.

azure-data-factory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

NandanHegde-7720 avatar image
0 Votes"
NandanHegde-7720 answered catflyinginsectant-4945 commented

Hey,

You can use the below roles:

 / Microsoft.DataFactory/factories/pipelines/createrun/action
 / Microsoft.DataFactory/factories/cancelpipelinerun/action
 / Microsoft.DataFactory/factories/pipelineruns/cancel/action

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you for anwsering!
Are you suggesting like below?
Will this also enable user to cancel other pipeline runs?

     {
         "properties": {
             "roleName": "Run Data Factory pipeline",
             "description": "This allows to run this DF pipeline - factories/<YouDataFactoryName>/pipelines/<YourPipelineName>",
             "assignableScopes": [
                 "/subscriptions/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx/resourceGroups/<YourResourceGroupName>/providers/Microsoft.DataFactory/factories/<YouDataFactoryName>/pipelines/<YourPipelineName>"
             ],
             "permissions": [
                 {
                     "actions": [
                         "Microsoft.DataFactory/factories/pipelines/createrun/action"
                         "Microsoft.DataFactory/factories/cancelpipelinerun/action"
                         "Microsoft.DataFactory/factories/pipelineruns/cancel/action"
                     ],
                     "notActions": [],
                     "dataActions": [],
                     "notDataActions": []
                 }
             ]
         }
     }


0 Votes 0 ·
NandanHegde-7720 avatar image NandanHegde-7720 catflyinginsectant-4945 ·

Hey,
Those would enable the user to cancel runs of only pipelines mentioned in the custom role and not other pipelines in that ADF as the granularity is pipeline here.
/factories/<YouDataFactoryName>/pipelines/<YourPipelineName>

You can create this role at ADF level if need be to cancel all pipeline runs.

0 Votes 0 ·

Thank you! That clears my question!

0 Votes 0 ·