Is the Databricks Operational Security Package for enterprise grade security capabilities enabled by default on Azure Databricks or is it an opt-in add-on on the Azure platform that depend on the selected pricing tier?
On Azure security is part of the premium tier. See also here. AAD integration for workspace access is part of all pricing tiers on Azure.
Related
We're in Databricks Standard SKU, in standard SKU, there is no access control and every users are admin, due to which everybody has previlage to create there own cluster. Is there a way we can restrict the cluster creation for databricks users in stadard SKU.
I know in Premium SKU, we could easily create groups and in the Entitlements option, we can uncheck the Allow cluster creation option. Is there a similar functionality is available in Standard SKU? Any pointers would help.
Also, if somebody starts the Databricks cluster is there a way we can get alerts/notifications.
Azure Databricks Standard
Databricks have 5 levels for access control and in the standard plan, all are disabled.
In standard, every user is an admin, and any user can add another user even that does not have access or any resource group or subscription.
Azure Databricks Premium
Premium, we have role-based access control. Before working on these make sure it’s enabled.
Databricks cluster is there a way we can get alerts/notifications ?
Yes, You can get alerts/notifications. Please follow the below reference it has detail information about Azure Databricks alert and standard, premium Databricks .
Reference:
Azure Databricks-Alert
https://www.linkedin.com/pulse/azure-databricks-standard-vs-premium-ashish-kumar
https://learn.microsoft.com/en-us/azure/databricks/sql/user/alerts/
https://www.youtube.com/watch?v=ACN01NYXGRU&t=712s
How to set up CI/CD pipelines for Azure Data Factory in GitLab. Can we deploy Data Factory through GitLab. Can someone please share useful links/documents for the same. TIA!
Unfortunately, Azure Data Factory doesn't support Gitlab.
Currently, Azure Data Factory allows you to configure a Git repository with either Azure DevOps or GitHub.
Reference: Continuous integration and delivery in Azure Data Factory
I would suggest you to vote up an idea submitted by another Azure customer.
https://feedback.azure.com/d365community/idea/aa3d7da4-6f26-ec11-b6e6-000d3a4f032c
All of the feedback you share in these forums will be monitored and reviewed by the Microsoft engineering teams responsible for building Azure.
I have a requirement to automate deployment to different environment(dev, stage and prod) using Azure devops. I am not able to find a task for the same. Azure devops has task for SQLServer database deploy, MySql Database deploy but not for the Oracle database deploy.
I am very new in Azure devops. Please guide me how can I achieve this.
For this issue, Red Gate has a set of deployment tools for Oracle, but integrated in Azure Devops is the SQL Change Automation extension, which is only applicable to SQL Server database.
So AFAIK, there is currently no task for Oracle database deploy. You could add your request for this feature on our UserVoice site, which is our main forum for product suggestions. You could also vote the suggestion ticket and share your comment there, so product team would provide the updates if they view it.
As a workaround , you could try to use the PowerShell on Remote machine task to deploy your Oracle changes and place them in an Azure DevOps CI/CD pipeline without having to install an extension from the Marketplace. For details ,please refer to this blog.
We have enabled a CI/CD pipeline using azure pipeline. Whenever someone check in to the master, the build should happen and deployment should follow. I wanted to understand how can I disallow someone to deploy to azure function web app from local visual studio
You could use RBAC Rules which may require a lot of config work.
Once you have CI/CD pipeline enabled, setting up RBAC(Role Based Access Control) helps to prevent users from getting the publishing profile, setting deployment credentials etc.,
There will definitely be some config work involved in doing this because you would have to only allow permission to one user so that user could set up the service principal connection between azure and DevOps but also prevent users from creating a deployment user.
Is there a way to download debug snapshots for Operations in Azure App Insight. (It can be done for the exception) Need to use these to debug Asp. Net core project in VS.
It seems that the azure portal admin needs to create a new role and assign a user to see and download snapshots from App Insight.