Unable to share azure data explorer connections

[rajat-srivastav]

Hi all,

I have been trying to share an Azure Data Explorer (Kusto) Connection with other users bu there seems to be no option to do so (even in the three dots>managed access tab). Is it not possible to share the connection at all?

Also, if it's not possible, is it because of the OAuth2 (the only option) authentication type in the connection? Please explain.

Adding on my question, what is the workaround for this limitation? Lets say I', working for a client in the client's environment, how do I create a connection for ADX and give the access to the concerned people (since my ID is destined to be deleted after the project delivery) ? Do I use some sort of Service Account? Or is there some more robust work around?

[v-jingzhan-msft]

Hi @rajat-srivastav 

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet.
In case if you have any resolution please do share that with the community as it can be helpful to others.
Otherwise, will respond back with more details and we will try to help.

Best Regards,
Jing

[v-jingzhan-msft]

Hi @rajat-srivastav 

Can you provide some more details, like Where did you create the connection to Azure Data Explorer? Is it in Fabric or somewhere else? Where is the connection used or to be used? Do you mean you want to find a solution to share the connection with external users of an organization? 

Best Regards,
Jing

[rajat-srivastav]

Hi, Thanks for your response.

1. I have created the connection in Fabric itself (you can see the connection under manage gateways and connection page)

2. The connection has been created and is being used in pipelines.

3. I want to share the connection with people within the same tenant. (usually done in the manage access setting page for other connections)

There is no option to share this connection with other users (within OR outside of the organization). I need a way to do so.

Sidestory - we are working in a client's environment to provide them a solution. The client has temporarily created our ids on Entra. These IDs are supposed to be deleted after the project delivery. Therefor we need to give access to the client over all the resources. For ADX connection there seems to be no way.

[v-jingzhan-msft · Accepted solution]

Hi @rajat-srivastav 

You may give the following steps a try. To avoid losing anything potentially, please create a new connection to do a test first. 

1. Transfer Ownership: You need to transfer the ownership of the Kusto connection to another user. Go to Manage users page to add another user to this connection. Give the user Owner permission. 

   

2. Update Credentials: The new owner will need to update the OAuth 2.0 credentials associated with the connection. Ask the new owner to log in to Fabric with his/her account. Go to manage gateways and connection page. Go to Settings page of the kusto connection, click "Edit credentials" to authenticate with his/her account. This way, the connection will be updated with the new owner's credentials. Then remove your account's owner permission from the Kusto connection. 

   

3. Verify Permissions: Ensure that the new owner has the appropriate permissions to access the Azure Data Explorer (Kusto) data source. You have to go to Azure Portal to manage this permission. 

4. Test the Connection: After transferring ownership and updating credentials, it's important to test the connection to ensure that it works as expected. This can be done by running a few queries or data pipelines that use the connection. 

Best Regards,
Jing
If this post helps, please Accept it as Solution to help other members find it. Appreciate your Kudos!

[v-jingzhan-msft]

Thank you for answering my questions. I haven't used Azure Data Explorer (Kusto) before, so I need some time to research this. I will update here once I got any progress. Thank you for your understanding and patience.

Best Regards,
Jing