Permissions - Precisely Data Integrity Suite

Data Integrity Suite
Product
Spatial_Analytics
Data_Integration
Data_Enrichment
Data_Governance
Precisely_Data_Integrity_Suite
geo_addressing_1
Data_Observability
Data_Quality
dis_core_foundation
Services
Spatial Analytics
Data Integration
Data Enrichment
Data Governance
Geo Addressing
Data Observability
Data Quality
Core Foundation
ft:title
Data Integrity Suite
ft:locale
en-US
PublicationType
pt_product_guide
copyrightfirst
2000
copyrightlast
2026

Extracting metadata from Azure Data Factory (ADF) requires appropriate permissions. Without the required access, the connection may fail or return incomplete metadata.

The import bridge connects to Azure Data Factory hosted in Microsoft Azure using Azure Active Directory (Azure AD) Service Principal authentication. Authentication is performed using OAuth2 through the Microsoft Authentication Library (MSAL) against Azure Resource Manager (ARM) APIs.

  • Client ID (Application ID)
  • Client Secret
  • Tenant ID
  1. Register an Azure AD Application: Before connecting, you must create an application registration in Azure AD.
    1. Go to the Microsoft Azure Portal
    2. Navigate to Azure Active Directory → App registrations
    3. Click New registration
    4. Configure the application:
      • Name: (e.g., MIMB-ADF)
      • Supported account type: Single-tenant
      • Redirect URI: Not required
    5. After creation, copy the Application (client) ID and Directory (tenant) ID
    6. Go to Certificates & secrets
    7. Click New client secret
    8. Copy and securely store the Client Secret value
      Note: The client secret value is shown only once. Store it securely.
  2. Assign Required Permissions (RBAC): To allow metadata extraction from Azure Data Factory, assign read access to the Service Principal.
    • Minimum Required Role is Reader
    • Recommended Role (if available) is Data Factory Reader
  3. Assign Role via Azure Portal
    1. Navigate to your Azure Data Factory instance
    2. Open Access Control (IAM) and Click Add >Add role assignment
    3. Select one of the roles:
      • Reader
      • Data Factory Reader
    4. Assign access to the Service Principal (Application) you created.
      Note: Do not assign the role to a user account. The Service Principal must have direct access.