question

KrystinaWoelkersAmrock avatar image
0 Votes"
KrystinaWoelkersAmrock asked PRADEEPCHEEKATLA-MSFT commented

Can not create Azure Data Factory even with the Data Factory Contributor role

I was assigned the Data Factory Contributor role - and thats is - I do not have any higher permissions than this.

When I try to create the ADF through the UI I get an error "xxx does not have authorization to perform action 'microsoft.datafactory/register/action over scope..."

Microsoft documentation (https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#data-factory-contributor) states that the data factory contributor role should be able to create azure data factories. However in another page (https://docs.microsoft.com/en-us/azure/data-factory/concepts-roles-permissions) it says that in order to create an azure data factory instance you need to have higher permissions.

So my question is, is the data factory contributor role supposed to allow to create an azure data factory?


azure-data-factory
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello @KrystinaWoelkersAmrock,

Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.


  • Please don't forget to click on 130616-image.png or upvote 130671-image.png button whenever the information provided helps you.

0 Votes 0 ·
NandanHegde-7720 avatar image
1 Vote"
NandanHegde-7720 answered

Hey,
You need to have contributor role in the Resource group in which you are trying to create the Azure data factory in order for you to create one.
ADF contributor role would allow to create pipelines, delete it etc assuming an ADF is already present.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

PRADEEPCHEEKATLA-MSFT avatar image
0 Votes"
PRADEEPCHEEKATLA-MSFT answered

Hello @KrystinaWoelkersAmrock,

Thanks for the question and using MS Q&A platform.

To create Data Factory instances, the user account that you use to sign in to Azure must be a member of the contributor role, the owner role, or an administrator of the Azure subscription.

Note: To view the permissions that you have in the subscription, in the Azure portal => Select your subscription => Go to Access control (IAM) => Under Check access => Click on view my access.

135883-image.png

To create and manage child resources for Data Factory - including datasets, linked services, pipelines, triggers, and integration runtimes - the following requirements are applicable:

  • To create and manage child resources in the Azure portal, you must belong to the Data Factory Contributor role at the Resource Group level or above.

  • To create and manage child resources with PowerShell or the SDK, the contributor role at the resource level or above is sufficient.

For more details, refer to Roles and permissions for Azure Data Factory.

Hope this will help. Please let us know if any further queries.


  • Please don't forget to click on 130616-image.png or upvote 130671-image.png button whenever the information provided helps you. Original posters help the community find answers faster by identifying the correct answer. Here is how

  • Want a reminder to come back and check responses? Here is how to subscribe to a notification

  • If you are interested in joining the VM program and help shape the future of Q&A: Here is how you can be part of Q&A Volunteer Moderators


image.png (114.6 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.