Which three actions should you perform?

You have an Azure Synapse Analytics serverless SQL pool.

You need to catalog the serverless SQL pool by using Azure Purview.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A . Create a managed identity in Azure Active Directory (Azure AD).
B . Assign the Storage Blob Data Reader role to the Azure Purview managed service identity (MSI) for the storage account associated to the Synapse Analytics workspace.
C . Assign the Owner role to the Azure Purview managed service identity (MSI) for the Azure Purview resource group.
D . Register a data source.
E . Assign the Reader role to the Azure Purview managed service identity (MSI) for the Synapse Analytics workspace.

View Answer

Answer: ABE

Explanation:

Authentication for enumerating serverless SQL database resources

There are three places you’ll need to set authentication to allow Microsoft Purview to enumerate your serverless SQL database resources:

The Azure Synapse workspace

The associated storage

The Azure Synapse serverless databases

The steps below will set permissions for all three.

Azure Synapse workspace

In the Azure portal, go to the Azure Synapse workspace resource.

On the left pane, select Access Control (IAM).

Select the Add button.

Set the Reader role and enter your Microsoft Purview account name, which represents its managed service identity (MSI).

Select Save to finish assigning the role

Azure Synapse Analytics serverless SQL pool catalog Purview Azure Purview managed service identity

Storage account

In the Azure portal, go to the Resource group or Subscription that the storage account associated with the Azure Synapse workspace is in.

On the left pane, select Access Control (IAM).

Select the Add button.

Set the Storage blob data reader role and enter your Microsoft Purview account name (which

represents its MSI) in the Select box.

Select Save to finish assigning the role.

Azure Synapse serverless database

Go to your Azure Synapse workspace and open the Synapse Studio.

Select the Data tab on the left menu.

Select the ellipsis (…) next to one of your databases, and then start a new SQL script.

Add the Microsoft Purview account MSI (represented by the account name) on the serverless SQL databases. You do so by running the following command in your SQL script: SQL

CREATE LOGIN [PurviewAccountName] FROM EXTERNAL PROVIDER; Apply permissions to scan the contents of the workspace

You can set up authentication for an Azure Synapse source in either of two ways. Select your scenario below for steps to apply permissions.

Use a managed identity

Use a service principal

Reference: https://docs.microsoft.com/en-us/azure/purview/register-scan-synapse-workspace?tabs=MI