Registering the Application to Use Purview with Team Server

From TeamServer ER/Studio
Jump to: navigation, search

Go Up to Understanding Purview Integration

Before using Microsoft Purview with ER/Studio Team Server, you must register the application with Microsoft Entra ID and then create a service principal.

To register with Microsoft Entra ID

  1. Log in to the Microsoft Entra Admin Center with a user account that has at least Cloud Application Administrator permissions.
  2. Click Identity > Applications > App registrations, and then click New registration.
  3. Name the application, for example, example-app.
  4. Select the appropriate supported account type which determines who can use the application.
  5. Click Register.
  6. Make a note of the Client ID and Tenant ID

Adding a Secret to the Client Credentials

Microsoft Entra ID uses a "client secret" as the password for the service principal. This is a combination of up to 40 characters including letters, numbers, and some special characters.

To add a secret to the client credentials

  1. Browse to Identity > Applications > App registrations, and then select the application you just registered.
  2. Click Certificates & Secrets.
  3. Click Client Secrets, and then click New Client Secret.
  4. Type a description of the secret and a duration for how long this secret is valid.
  5. Click Add.
  6. Copy the secret value. Note that you can copy the value only once.

Permissions Required for Accessibility from Team Server

The registered app must have the following permissions, which can be set in Data Map > Domains > Role Assignments for the Root Collection:

  • Collection Admin. Collection admins can edit the collection, its details, and add subcollections. They can also add data curators, data readers, and other Microsoft Purview roles to a collection scope.
  • Data source Admins. Data source admins can manage data sources and data scans.
  • Data Curators. Data curators can perform create, read, modify, and delete actions on catalog data objects and establish relationships between objects.
  • Data Readers. Data readers have access to read catalog data objects.
Notepad blue icon 2.pngNote: Data Curators and Data Readers permissions are required to create the metamodel and the relationships between the assets.

See Also