Connecting to Azure Data Lake Storage Gen2

1

Create a new Storage Account with Hierarchical Namespace

• Name your storage account as Syniti Drive Integration and note the storage account name

* Create an Azure storage account

* Register a Microsoft Entra app and create a service principal

* Role-based access control (Azure RBAC)

* Manage storage account access keys

* Shared Key and Shared Access Signature (SAS) authorization

* Use Azure Storage Explorer to manage directories and files in Azure Data Lake Storage

2

Create an Microsoft Entra app and a Service Principal

• In App registrations, note the values for the following fields: Application (client) ID and Directory (tenant) ID

• In the newly created app, access Certificates & secrets, add a new client secret, and then copy the secret value.

3

Create a File System (Blob Container)

4

Assign role-based access control (RBAC) permissions to the service principal

5

Create a system datastore connection in the SKP using the SharePoint Online connection properties listed below

* Datastores

* Create a Connection

Storage Account Name

required

The name of your Azure Storage account.

Client ID

required

Enter the Application (client) ID that uniquely identifies your registered application in Microsoft Entra ID. This ID is used during authentication and authorization.

Client Secret

required

Enter the client secret generated for your application in Microsoft Entra ID. This secret is used to authenticate the application when accessing Data Lake container resources securely.

Tenant ID

required

Enter the Directory (tenant) ID that uniquely identifies your organization in Microsoft Entra ID. This value is required to authenticate requests to your Azure Data Lake Storage Gen2 tenant.

Account Key

required for Account Key

The storage account access key. Copy the key value from Storage account > Access keys in the Azure portal.

SAS Token

required for SAS Token

A SAS token granting scoped access to your storage resources. Generate a token from Storage account > Shared access signature. Ensure it has the required permissions (read/list at minimum) and that it has not expired.

Endpoint Suffix

The Azure endpoint suffix for your cloud environment. The default is azuredatalakestore.net for Azure public cloud. Modify this only for sovereign/government cloud deployments.

Default Container

The default blob container to use. This value determines which container the SKP can interact with.

Default Directory

The default directory path within the container. Use / for the container root, or specify a path like /path/2024 to scope operations to a subdirectory.

Extended Properties

Use the + Add Property button to add any additional connection properties.