Datalake gen2 Client Secret Integration
  • 08 Jul 2024
  • Dark
    Light
  • PDF

Datalake gen2 Client Secret Integration

  • Dark
    Light
  • PDF

Article summary

Overview

To connect your Azure Datalake Gen2 to Dataloop, follow these setup instructions.


Register an App in Microsoft Azure

  1. Open Microsoft Azure and search for the App registrations in the search bar.
  2. Click App registrations.
  3. Click +New registration and enter a name for your application.
  4. Note the Application (client) ID and the Directory (tenant) ID from the Application overview page, which are required for the integration.


Create a New Client Secret

  1. Once you create an application, on the left-side panel navigate to Certificates & secrets.
  2. Click +New client secret to create a new secret for the application.
  3. Enter a description for the client secret.
  4. Select a timeframe from the list when the integration expires (the recommended setting is the longest period).
  5. Click Add. A confirmation message is displayed, and the client secret is added to the application.
Important

Copy the secret value and store it for later use, because you cannot access it again. The secret value is required in the Integration phase.


Create a Storage Account

  1. Open Microsoft Azure and search for the Storage accounts in the search bar.
  2. Select a Storage account or create a new account if you do not have one.
  3. When you create Storage Account under the Advanced tab, go to Data Lake Storage Gen2 and mark Enable hierarchical namespace.
    See Create a Storage account for more information on creating a storage account in Azure.

Create a Container

  1. Open Microsoft Azure and search & select Storage accounts in the search bar.
  2. Select the desired Storage account from the list.
  3. Select Containers from the left portal menu.
  4. Choose the desired Container from the list, or see Create a container to create a container.


Add an IAM Role Assignments to a Container

  1. Select the chosen container, the one you will integrate with Dataloop. Refer to the previous section to view the instructions to identify or create a container.
  2. From the left portal menu, select Access Control (IAM).
  3. Click Add.
  4. Select Add role assignment.
  5. Search and select Storage Blob Data User from the Role list, and click Next.
  6. Under Members section, make sure Assign access to” is set to User, group, or service principals.
  7. Under Members section, click on Select members.
  8. On the search bar enter your registration app’s name which you created earlier, choose it and click Select.
  9. Click Review+sign.
Note: It takes up to 5 minutes to update the permissions to use in Dataloop. To set up a policy in Azure, see Setup Azure Policy.


Create an Azure Client Secret Integration on the Dataloop Platform

  1. Log in to the Dataloop platform.
  2. From the left-side panel, select Data Governance.
  3. Click Create Integration. A pop-up window is displayed.
  4. Integration Name: Enter a Name for the integration.
  5. Provider: Select Azure from the list.
  6. Integration Type: Select the Client Secret from the list.
  7. Account Name: Enter your storage account Name where the container is located.
  8. Application (Client) ID: Enter the registration app client ID that you noted while registering an application earlier.
  9. Directory (Tenant) ID: Enter the registration app tenant ID that you noted while registering the application earlier.
  10. Client Secret: Enter the client secret’s value that you noted while creating the new client secret.
  11. Click Create Integration. A confirmation message is displayed.


Create an Azure Data Lake Gen2 Storage on the Dataloop Platform

For more information, see the Create an Azure Data Lake Gen2 Storage on the Dataloop Platform topic.