For more information on how to set up security in Azure Synapse, see the
official Synapse documentation.
Credentials
Atoti DirectQuery delegates the credentials handling to a MicrosoftSQLServerDataSource.
Executing SQL in Azure Synapse requires a
SQL user
in the target database. As described in the Microsoft documentation, several authentication methods can be used.
The following example builds the data source with an SQL login:
- create a SQL user with a Microsoft Entra ID (formerly Azure Active Directory) login.
- create a SQL user backed by a Managed Identity.
More examples are available in the Microsoft documentation:
Permissions
The SQL user used by DirectQuery needs to have the permissions to run queries in Synapse. To be able to run queries, theCONNECT permission is needed on the Synapse database to be used,
then the SELECT permission is needed on the schemas or tables the user will use.