Azure Synapse RLS based in Logged in users AZ AD security group he belongs to
Hi,
In Azure synapse dedicated SQl pool I am trying to implement and test row level security using security predicate function and security policy based on logged in users Azure Active directory security group.
- Created external Az AD security group as user from extrenal provider
- Created roles rls_ad_normal
- Added AZ AD security group to DB role created in step2 using sp_addrolemember, so that AZ AD security group is a member of role(s) created in step2
- Created security predicate function with logic is_ROLEMEMBER( rls_ad_normal) and @user_entitlement= NORMAL
- Created security policy
user_entitlement is a column in data.Table1
But rows are not getting filtered based on logged in users Azure Active directory security group he belongs to.
Both SELECT IS_ROLEMEMBER(‘rls_AD_normal’) As InRole And SELECT IS_MEMBER(‘rls_AD_normal’) returning 0 (Zero)
Does Azure Active directory groups membership of logged in user dosent get resolved in Synapse Dedicated SQL pool?
Thanks,
Read more here: Source link
