DP-203 · Question #412
You have an Azure subscription that contains an Azure Synapse Analytics workspace and a user named User1. You need to ensure that User1 can create a new lake database by using an Azure Synapse…
The correct answer is A. Synapse Contributor. Creating a lake database from a Synapse Gallery template requires write access to the Synapse workspace. Synapse Contributor is the least-privileged role that grants this capability.
Question
You have an Azure subscription that contains an Azure Synapse Analytics workspace and a user named User1. You need to ensure that User1 can create a new lake database by using an Azure Synapse database template from Gallery. The solution must follow the principle of least privilege. Which role should you assign to User1?
Options
- ASynapse Contributor
- BSynapse Administrator
- CSynapse User
- DStorage Blob Data Contributor
How the community answered
(33 responses)- A85% (28)
- B3% (1)
- C3% (1)
- D9% (3)
Why each option
Creating a lake database from a Synapse Gallery template requires write access to the Synapse workspace. Synapse Contributor is the least-privileged role that grants this capability.
The Synapse Contributor role grants permissions to create and manage Synapse artifacts including databases, while being scoped below Administrator. It allows a user to create lake databases from Gallery templates without granting full administrative control over the workspace.
Synapse Administrator has full control over the workspace including managing access and credentials, which violates the principle of least privilege for this task.
Synapse User is a read-only role that allows viewing pipelines and other artifacts but does not grant permission to create or modify workspace objects.
Storage Blob Data Contributor grants read/write access to Azure Blob storage but does not provide any Synapse workspace permissions needed to create lake databases.
Concept tested: Synapse Analytics RBAC roles least privilege
Source: https://learn.microsoft.com/en-us/azure/synapse-analytics/security/synapse-workspace-synapse-rbac-roles
Topics
Community Discussion
No community discussion yet for this question.