HTTP POST to Azure Data Catalog under Company network is returning null response

Question

I have written a python script to populate assets on Azure Data Catalog and it is working fine on my private pc and my private Azure account. When I run the same script on company PC, my http post requests return "None" value. (See Attachment). I assume security settings are not properly made by the company administrators. Moreover, I don't have access to Company's Active Directory to check the configurations. Could you please assist me on how finding the requirements for accessing Azure data catalog on a company network?

Answer 1

Hi @BerkanErcan-0861,

Welcome to Microsoft Q&A and thanks for your query.

To get more clarification, could you please confirm below info:

1. Is this the first time you are trying to register assets in your company's Data Catalog?
2. Were you able to add metadata to Company's Data Catalog from Data Catalog portal or Data Catalog Registration tool? If you are not able to access your Company's Data catalog, please refer to below information.

Azure Data Catalog allows administrators to specify who can access the data catalog and what operations (register, annotate, take ownership) they can perform on metadata in the catalog. For more information please refer to this doc and see if that helps: How to secure access to data catalog and data assets

Note: Important consideration about data catalog permissions

• The permissions assigned to security groups are additive. Say, a user is in two groups. One group has annotate permissions and other group does not have annotate permissions. Then, user has annotate permissions.
• The permissions assigned explicitly to a user override the permissions assigned to groups to which the user belongs. In the previous example, say, you explicitly added the user to catalog users and do not assign annotate permissions. The user cannot annotate data assets even though the user is a member of a group that does have annotate permissions.

Additional helpful info:
Azure Active Directory policy configuration : (Ref: Troubleshooting Azure Data Catalog)

• You may encounter a situation where you can sign in to the Azure Data Catalog portal, but when you attempt to sign in to the data source registration tool, you encounter an error message that prevents you from signing in. This error may occur when you are on the company network or when you're connecting from outside the company network.
• The registration tool uses forms authentication to validate user sign-ins against Azure Active Directory. For successful sign-in, an Azure Active Directory administrator must enable forms authentication in the global authentication policy.
• With the global authentication policy, you can enable authentication separately for intranet and extranet connections, as shown in the following image. Sign-in errors may occur if forms authentication isn't enabled for the network from which you're connecting.

Known limitation:
Accounts with type Guest Role are not supported. You cannot add guest accounts as users of Azure Data Catalog, and guest users cannot use the portal at https://www.azuredatacatalog.com.

Please let us know how it goes.

---

Thank you

Please do consider to click on "Accept Answer" and "Up-vote" on the post that helps you, as it can be beneficial to other community members.