I have an Azure Synapse Workspace for which I have the owner role in the subscription, resource group, and Resource itself, and I am the Microsoft Entra admin
for the Synapse Workspace, but a former employee had the Synapse Administrator role for managing the Synapse Workspaces. Despite my owner roles, when I follow the official instructions by opening the Synapse workspace, and selecting Manage > Access control, I get a message saying You do not have permission to review Synapse RBAC role assignments
and attempting to add a new Synapse Administrator role assignment fails.
How can I as the resource owner get access to the former employee’s work in that synapse workspace?
2
Answers
As per this Documentation
To assign Synapse Administrator role to yourself you need the owner role on resource group and resource it will take time to reflect changes.
You can also see the MSQnA thread link where @Gaurav Batta told he assigned Synapse Administrator role to himself but is should be user from the same tenant.
As the Owner of the Resource Group, it is possible to grant yourself the Synapse Administrator role. You may need to do this from the Azure Portal, rather an from inside the Synapse Studio interface. It can be done using PowerShell or the UI, but this link has very helpful information if you are comfortable using PowerShell:
https://techcommunity.microsoft.com/t5/azure-synapse-analytics-blog/retrieve-azure-synapse-role-based-access-control-rbac/ba-p/3466419
I swear that there used to be a specific help article for this topic for situations where the original Synapse Administrator user has left the company or is otherwise unavailable but my Bing skills aren’t up to the task today.