skip to Main Content

I have an Azure Synapse Workspace for which I have the owner role in the subscription, resource group, and Resource itself, and I am the Microsoft Entra admin for the Synapse Workspace, but a former employee had the Synapse Administrator role for managing the Synapse Workspaces. Despite my owner roles, when I follow the official instructions by opening the Synapse workspace, and selecting Manage > Access control, I get a message saying You do not have permission to review Synapse RBAC role assignments and attempting to add a new Synapse Administrator role assignment fails.

How can I as the resource owner get access to the former employee’s work in that synapse workspace?

2

Answers


  1. As per this Documentation

    A guest users (users from a different AD tenant) can also see and manage role assignment after being assigned the Synapse Administrator role.

    • Make sure from the account you are trin to access the workspace is from same AD tenant.
    • If you are guest user then who belong to the same Tenant (not a guest user) and who is owner of the Synapse workspace ask that user should be able to add your guest user id and grant synapse admin permission.

    To assign Synapse Administrator role to yourself you need the owner role on resource group and resource it will take time to reflect changes.

    You can also see the MSQnA thread link where @Gaurav Batta told he assigned Synapse Administrator role to himself but is should be user from the same tenant.

    Login or Signup to reply.
  2. As the Owner of the Resource Group, it is possible to grant yourself the Synapse Administrator role. You may need to do this from the Azure Portal, rather an from inside the Synapse Studio interface. It can be done using PowerShell or the UI, but this link has very helpful information if you are comfortable using PowerShell:

    https://techcommunity.microsoft.com/t5/azure-synapse-analytics-blog/retrieve-azure-synapse-role-based-access-control-rbac/ba-p/3466419

    I swear that there used to be a specific help article for this topic for situations where the original Synapse Administrator user has left the company or is otherwise unavailable but my Bing skills aren’t up to the task today.

    Login or Signup to reply.
Please signup or login to give your own answer.
Back To Top
Search