adlsgen2-configure-connection-profile
Note
An ADLS Gen2 connection profile can be used by the ADLS Gen2 adapters (ADLS Reader, ADLS Gen2 Writer, and Azure Blob Writer) and to configure the external staging area for Databricks Writer or Snowflake Writer.
Connection Profile Name: Enter a name that uniquely identifies the external resource.
Namespace: Select the namespace where the profile will be stored. Users of this profile must have READ and SELECT permissions on the namespace.
Endpoint Name: Select ADLSGen2.
Authentication Type: Select the type of authentication you want to use, then set the properties for that type as described below.
Setting ADLS Access Key properties
Azure Account Access Key: Specify the account access key from Storage accounts > <account name> > Access keys. For more information see Azure / Learn / Storage / Manage storage account access keys.
Azure Account Name: Specify the name of the storage account.
Azure Container Name: Specify the name of the ADLS container (also called the "file system"). If it does not exist, it will be created automatically.
Setting ADLS Entra ID properties
Entra ID was formerly known as Azure Active Directory.
Azure Account Name: Specify the name of the storage account.
Azure Container Name: Specify the name of the ADLS container (also called the "file system"). If it does not exist, it will be created automatically.
After specifying the account and container names, click Sign in using Entra ID. Log in with an Entra ID organization (work) account that has the Storage Blob Data Contributor role on the storage account. This is the account Striim will use to access ADLS. Once you log in successfully, close the browser window, return to the connection profile page, and test the connection.
Setting ADLS manual OAuth (Entra ID) properties
Manual OAuth is supported by the ADLS Gen2 adapters (ADLS Reader, ADLS Gen2 Writer, and Azure Blob Writer), and when you use ADLS as a staging area for Azure Databricks or Snowflake. When you use ADLS for staging, see Configuring Microsoft Entra ID (formerly Azure Active Directory) for Databricks Writer manually or Snowflake Writer.
Setting Microsoft Entra Service Principal properties
Microsoft Entra Service Principal authentication uses a Microsoft Entra app registration to authenticate non-interactively, without a browser sign-in. Create the app registration in the Azure portal, generate a client secret, and assign the app the appropriate role on the storage account: Storage Blob Data Reader for ADLS Reader, or Storage Blob Data Contributor for ADLS Gen2 Writer, Azure Blob Writer, and DWH external staging.
Client ID: The Application (client) ID of the Entra app registration. Required.
Client Secret: The value of a client secret generated for the app registration under Certificates & secrets. Copy the secret value when it is created; it cannot be retrieved later. Required.
Tenant ID: The Directory (tenant) ID of the Entra app registration. Required.
Azure Account Name: Specify the name of the storage account. Required.
Azure Container Name: Specify the name of the ADLS container (also called the "file system") to be used. If it does not exist, it will be created automatically.
Setting ADLS SAS properties
Azure SAS: Specify the SAS token for a shared access signature for the storage account. If there is a
?at the beginning of the SAS token, remove it. For more information, see Learn / Azure / Storage / Grant limited access to Azure Storage resources using shared access signatures (SAS) and Best practices when using SAS.Allowed services must include Blob, allowed resource types must include Service, Container, and Object, allowed permissions must include Read, Write, Delete, List, Add, Create, Update, Process, and Permanent Delete, and "Immutable storage" must be deselected.
Note that SAS tokens have an expiration date. When you update this property with a new token, applications using this connection profile will automatically switch to the new token when the old one expires.
Azure Account Name: Specify the name of the storage account.
Azure Container Name: Specify the name of the ADLS container (also called the "file system"). If it does not exist, it will be created automatically.