Why does the app registration for the ODX need owner permissions on the resource? I would think that read/write permissions would be sufficient.
Why does TimeXtender need the “extra” rights?
Best answer by Christian Hauggaard
View original
Userlevel 6
+5
Hi
It is due to Security rights.
In theory you could get away with having the Storage Blob Contributor right.
However using this option will give the following error when executing the Transfer task.
So therefore it will need the Storage Blob Owner or Owner right to apply those.
Thank you
Could you please elaborate a bit on what it is trying to do that is denied without owner rights?
Specifically what is/are the action(s) that it wants to perform that it can't as contributor?
From a security perspective we want to answer the question(s): “Why do you need these rights? Which specific security settings is the ODX trying to apply on the data lake?”
Userlevel 6
+5
Hi
For more information on security, please see: https://learn.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-access-control
Reply
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
