Cloudera Docs

Assigning Roles for the Managed Identities

Once you have created the Managed Identities, assign the roles with specific scopes to the identity.

  1. In ADLS, open Storage Accounts > your storage account > Access Control (IAM) > Add role assignments.
  2. Based on the type of extraction selected, you can add the type of role:
    For Bulk extraction, you can add the following:
    • Select Add > Add role assignment.
      • Role: Select Storage Blob Data Contributor.
      • Assign Access to: Select User assigned managed identity.
      • Subscription: As applicable.
    • Click Save.

    For Incremental extraction, you can add the following:

    • Select Add > Add role assignment.
      • Role: Select Storage Queue Data Contributor.
      • Assign Access to: Select User assigned managed identity.
      • Subscription: As applicable.
    • Click Save.