Prerequisites to Create a Microsoft Azure Data Lake Storage Gen2 Connection

Prerequisites to Create a Microsoft Azure Data Lake Storage Gen2 Connection

Permissions to access resources using access control lists

Permissions to access resources using access control lists

You can use access control lists to grant different levels of permissions to access directories and files to each user and service. If you do not want to use role-based access control to grant access to all of the data in a storage account, you can use access control lists to grant read
, write,
and execute permissions to a specific directory or file.
When you grant access to a file, you must assign the
execute
permission to the root folder of the container and to each folder in the hierarchy of folders that lead to the file.
The following table lists the permissions required when you create a mapping to access Microsoft Azure Data Lake Storage Gen2 using access control lists:
Action
Permissions
Test a connection
Read and execute permissions for the source
or target folder
.
Access an object
Read and execute permissions for the source folder that contains the object.
Select a file format
Read permission for the source file.
Preview data
Read permission for the source file.
Read data from a file or directory as source type
Read permission for the source file.
Use wildcard characters or recursive directory read
  • Read and execute permissions for the folders for which you want to use wildcard characters or recursive read.
  • Read permission for the source file.
Overwrite a folder or file
  • Write and execute permission for the target folder that contains the target file or folder that you want to overwrite.
  • Read, write, and execute permissions for the file or folder that you want to overwrite.
Append data to an existing file
Read and write permissions for the target file.
When you use managed identity authentication, assign read, write, and execute permissions to the target file.

0 COMMENTS

We’d like to hear from you!