Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Azure Data Explorer uses a role-based access control model to control access to databases and tables. In this model, principals (users, groups, and apps) map to roles, and each principal can access resources according to its assigned roles. For a list of available roles, see role-based access control.
This article describes the available roles and how to assign principals to those roles by using the Azure portal. To set database permissions with management commands instead, see Manage database security roles.
Prerequisites
- An Azure Data Explorer cluster and database. Create a cluster and database.
- At least Contributor Azure Resource Manager (ARM) permissions on the cluster to create or delete a database. To assign ARM permissions, see Assign Azure roles using the Azure portal.
Add database principals
Sign in to the Azure portal.
Go to your Azure Data Explorer cluster.
In the Overview section, select the database where you want to manage permissions. For roles that apply to all databases, skip this step and go directly to the next step.
Select Permissions, and then select Add.
Search for the principal, select it, and then select Select.
Remove database principals
Sign in to the Azure portal.
Go to your Azure Data Explorer cluster.
In the Overview section, select the database where you want to manage permissions. For roles that apply to all databases, go directly to the next step.
Select Permissions, and then select the principal to remove.
Select Remove.
Related content
- Learn about Azure Data Explorer role-based access control.
- To set cluster-level permissions, see Manage cluster permissions.
- To set permissions for a database with management commands, see Manage database security roles.
- To grant a principal view access to a subset of tables, see Manage table view access.