Hi Linked Service connection to a ADLS storage account looks to be restricted to the following (screen shot). Is there any way of changing this so the authentication type is the user who has logged into ADF? Essentially we want to ensure only the user who is logged into ADF can access the ADLS container they have been granted access to. Not scheduling the ADF to run. Is there anyway of logging ADF execution and who ran it and which storage account they accessed/ wrote to?

Unfortunately that is not possible. You cannot use a logged in users credential to access the ADLS via ADF linked services. Ideally best way would be to have seperate ADFs per ADLS and give access to the users to the specific ADF only. Yes, it is possible to get the log details via Activity log to check which user executed the ADF and which ADLS/connection he/she used but you would have to have some custom log set up to capture that

Linked Service - Read / Write to ADLS Storage using logged in user account

Accepted answer

Nandan Hegde 34,096 Reputation points MVP

2025-02-07T12:44:59.97+00:00

Unfortunately that is not possible. You cannot use a logged in users credential to access the ADLS via ADF linked services.

Ideally best way would be to have seperate ADFs per ADLS and give access to the users to the specific ADF only.

Yes, it is possible to get the log details via Activity log to check which user executed the ADF and which ADLS/connection he/she used but you would have to have some custom log set up to capture that
Please sign in to rate this answer.
SM 20 Reputation points

2025-02-07T12:59:19.4833333+00:00

Hi

Thanks for replying. I could the following under credentials which looks is in preview but can't find any information on what this option can be used for?

In terms for logging, do you have links to blogs etc. that will help me set this up?

Nandan Hegde 34,096 Reputation points MVP

2025-02-07T14:27:00.61+00:00

The User authentication aspect has yet not been officially released by MSFT nor announced hence you wont see any documentation for the same.

So as of today with GA features, it is not possible to pass a users own credentails for authentication.

For capturing user details of who manually trigerred pipeline :

https://datasharkx.wordpress.com/2023/05/18/automated-way-to-get-the-id-of-user-manually-triggering-the-azure-data-factory-pipeline/

And dependening on the activities that have been configured to use ADLS, you can set you your own audits

Ganesh Gurram 3,845 Reputation points Microsoft Vendor

2025-02-10T10:46:51.8566667+00:00

@SM - Just checking in to see if the above answer helped. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

Ganesh Gurram 3,845 Reputation points Microsoft Vendor

2025-02-11T13:52:04.1133333+00:00

@SM - Following up to see if the above answer helped. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Linked Service - Read / Write to ADLS Storage using logged in user account

0 additional answers

Your answer