Privileges Required to use Azure Data Factory
To use Azure Data Factory, you need one of the following:
scheduler-administratororredwood-administratorrole.scheduler-userorredwood-loginrole in combination with the following system-wide, partition-wide or object-level privileges.
Built-in Roles
- The
scheduler-administratororredwood-administratorbuilt-in role provides full control over all Azure Data Factory connections.
Creating, Modifying Azure Data Factory Connections
You need all of the following privilege ranks to be able to create and modify Azure Data Factory connections:
- View - on partitions GLOBAL and REDWOOD.
- View - on application REDWOOD.Redwood_DataFactory.
- View - on library REDWOOD.Redwood_DataFactory.
- View - on the existing Azure Data Factory process server and queue, if applicable.
- Create - on process server and queue if a new process server and queue are required.
- Submit - on process definition Sharepoint_Configure.
- Either:
- Create - on credential in the REDWOOD partition if a credential needs to be created.
- Edit - on credential in the REDWOOD partition if a credential needs to be modified.
Using the Azure Data Factory Component
You need all of the following privilege ranks to be able to use an Azure Data Factory connection:
- View - on partitions GLOBAL and REDWOOD.
- View - on application REDWOOD.Redwood_DataFactory.
- View - on REDWOOD.Redwood_DataFactory library.
- Submit - on process definitions REDWOOD.DataFactory_ImportJobTemplate, REDWOOD.DataFactory_ShowPipelines, REDWOOD.DataFactory_RunPipeline, and/or REDWOOD.DataFactory_Template (depending on the functionality you want).
- View - on the process server of the Azure Data Factory connection.
- JobAdministrator - on the queue of the Azure Data Factory component.
- View - on credential in the REDWOOD partition or on the credential to use.
Deleting Azure Data Factory
- View - on partition REDWOOD.
- Delete - on credential in REDWOOD partition.