question

Hicham-0908 avatar image
0 Votes"
Hicham-0908 asked GeethaThatipatri-MSFT commented

Unable to get Azure Purview Lineage extraction working

In order to get the Lineage Extraction (preview) feature working when running a scan, I had been informed that I need to execute the ''Prerequisites for setting up scan with Lineage extraction" from the following document under ''Lineage(Preview)'': https://docs.microsoft.com/en-us/azure/purview/register-scan-azure-sql-database?tabs=sql-authentication#lineagepreview

196644-scan-probleem.png

Only, when running the query, I keep getting the following error message. Does anyone happen to have any idea what this is due to? I assume I need to put the name of my purview account in the next query. So the query:

Create user <purview-account> FROM EXTERNAL PROVIDER

Will then become:

Create user "purview-account-mcd-dg" FROM EXTERNAL PROVIDER

Because my Purview account is called as follows: purview-account-mcd-dg

Only I keep getting the following error code in SQL Server Management Studio for this, Does anyone happen to have any idea what this is due to?

196661-foutmelding-sql.png


Error code:

Msg 33159, Level 16, State 1, Line 1
Principal 'purview-account-mcd-dg' could not be created. Only connections established with Active Directory accounts can create other Active Directory users.

Completion time: 2022-04-26T15:46:23.8112222+02:00



Thanks in advance for the help!

azure-sql-databaseazure-purview
scan-probleem.png (41.2 KiB)
foutmelding-sql.png (114.1 KiB)
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

GeethaThatipatri-MSFT avatar image
0 Votes"
GeethaThatipatri-MSFT answered GeethaThatipatri-MSFT commented

Hi, @Hicham-0908 Thanks for the ask and for using the Microsoft Q&A platform.
As we understand the ask here is you are trying to create a user with a purview account based on the documentation provided and you are facing an issue.

As per the error message "connections established with Active Directory accounts can create other Active Directory users" I want to check if your Azure SQL database has Azure active directory permissions.

I have created it with AAD and it worked fine.
196686-image.png

From the scan please select MSI as mentioned in the document
196687-image.png

Please let me know if you find any issues.

Regards
Geetha



image.png (25.5 KiB)
image.png (71.0 KiB)
· 14
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hicham-0908 avatar image Hicham-0908 ·

Hi @GeethaThatipatri-MSFT ,

Thank you very much for your quick response and your help. I don't know if my Azure SQL Database has any Azure active directory permissions. Do you have any idea, how I can find out?

I am looking forward to your response!

0 Votes 0 ·
GeethaThatipatri-MSFT avatar image GeethaThatipatri-MSFT Hicham-0908 ·

@Hicham-0908 Thanks for your response

From the portal go to your SQL Server database under settings you will find the Azure Active directory please find the screenshot below.
197028-image.png

Please let me know if you find any further issues.

Regards
Geetha


0 Votes 0 ·
image.png (39.1 KiB)
image.png (43.2 KiB)
Hicham-0908 avatar image Hicham-0908 GeethaThatipatri-MSFT ·

Hi @GeethaThatipatri-MSFT ,

Thank you again for your quick response. I have found the Azure Active Directory. Within this, should I add the Purview account as admin or my own personal account that I work from?

I am looking forward to your response!

0 Votes 0 ·
Show more comments