Quickstart: Create an Azure Purview account using Azure PowerShell/Azure CLI

In this Quickstart, you'll create an Azure Purview account using Azure PowerShell/Azure CLI. PowerShell reference for Azure Purview is available, but this article will take you through all the steps needed to create an account with PowerShell.

Azure Purview is a data governance service that helps you manage and govern your data landscape. By connecting to data across your on-premises, multi-cloud, and software-as-a-service (SaaS) sources, Azure Purview creates an up-to-date map of your information. It identifies and classifies sensitive data, and provides end-to-end linage. Data consumers are able to discover data across your organization, and data administrators are able to audit, secure, and ensure right use of your data.

For more information about Azure Purview, see our overview page. For more information about deploying Azure Purview across your organization, see our deployment best practices.

Prerequisites

  • If you don't have an Azure subscription, create a free subscription before you begin.

  • An Azure Active Directory tenant associated with your subscription.

  • The user account that you use to sign in to Azure must be a member of the contributor or owner role, or an administrator of the Azure subscription. To view the permissions that you have in the subscription, go to the Azure portal, select your username in the upper-right corner, select the "..." icon for more options, and then select My permissions. If you have access to multiple subscriptions, select the appropriate subscription.

  • No Azure Policies preventing creation of Storage accounts or Event Hub namespaces. Azure Purview will deploy a managed Storage account and Event Hub when it is created. If a blocking policy exists and needs to remain in place, please follow our Azure Purview exception tag guide and follow the steps to create an exception for Azure Purview accounts.

Sign in to Azure

Sign in to the Azure portal with your Azure account.

Install PowerShell

Install either Azure PowerShell or Azure CLI in your client machine to deploy the template: Command-line deployment

Create an Azure Purview account

  1. Sign in with your Azure credential

    Connect-AzAccount
    
  2. If you have multiple Azure subscriptions, select the subscription you want to use:

    Set-AzContext [SubscriptionID/SubscriptionName]
    
  3. Create a resource group for your Azure Purview account. You can skip this step if you already have one:

    New-AzResourceGroup -Name myResourceGroup -Location 'East US'
    
  4. Create or Deploy the Azure Purview account

    Use the New-AzPurviewAccount cmdlet to create the Azure Purview account:

    New-AzPurviewAccount -Name yourPurviewAccountName -ResourceGroupName myResourceGroup -Location eastus -IdentityType SystemAssigned -SkuCapacity 4 -SkuName Standard -PublicNetworkAccess Enabled
    
  5. The deployment command returns results. Look for ProvisioningState to see whether the deployment succeeded.

  6. If you deployed the Azure Purview account using a service principal, instead of a user account, you will also need to run the below command in the Azure CLI:

    az purview account add-root-collection-admin --account-name [Azure Purview Account Name] --resource-group [Resource Group Name] --object-id [User Object Id]
    

    This command will grant the user account collection admin permissions on the root collection in your Azure Purview account. This allows the user to access the Azure Purview Studio and add permission for other users. For more information about permissions in Azure Purview, see our permissions guide. For more information about collections, see our manage collections article.

Next steps

In this quickstart, you learned how to create an Azure Purview account.

Follow these next articles to learn how to navigate the Azure Purview Studio, create a collection, and grant access to Azure Purview.