How to Use System-Assigned Managed Identity for Secure Access to Blob Storage in Synapse Notebook?

Question

Hello Community,

I'm currently working on a project in Azure Synapse Analytics and would like to enhance the security of my data access. My Python code in the Synapse notebook currently accesses Blob Storage using a connection string, but I want to switch to using a system-assigned managed identity for passwordless access.

Could you please provide the steps to configure and use a system-assigned managed identity for accessing Blob Storage securely within a Synapse notebook?
Any code examples or configuration tips would be greatly appreciated!

Pls don't sent me a chatgpt prompt

Thank you in advance for your help!

Answer 1

Hello Vaibhav, Welcome to MS Q&A

• To configure and use a system-assigned managed identity for accessing Blob Storage securely within a Synapse notebook, follow these steps:

Enable Managed Identity: Ensure that your Synapse workspace has a system-assigned managed identity. This is usually enabled by default for the workspace.

Assign Role to Managed Identity:

1. Navigate to your Blob Storage account in the Azure portal.
2. Go to the "Access control (IAM)" section.
3. Click on "Add" and then "Add role assignment".
4. Assign the role of "Storage Blob Data Contributor" to the managed identity associated with your Synapse workspace.

Use Managed Identity in Synapse Notebook:

• When running your Spark notebooks, enable "Run as managed identity" from the Configure session menu.
• You can now access Blob Storage using the managed identity without needing to manage credentials manually.

Please let me know if you have any other questions

Kindly accept answer if you think not a chatgpt response :)

References:

• Managed identity for Azure Synapse
• Securely load data using Synapse SQL

Thanks

Deepanshu