Skip to main content

Preparing to run the Microsoft SQL Server collector

Setting up pre-requisites for running the collector

Make sure that the machine from where you are running the collector meets the following hardware and software requirements.

Table 1.

Item

Requirement

Hardware (for on-premise runs only)

Note: The following specs are based upon running one collector process at a time. Please adjust the hardware if you are running multiple collectors at the same time.

RAM

8 GB

CPU

2 Ghz processor

Software (for on-premise runs only)

Docker

Click here to get Docker.

data.world specific objects (for both cloud and on-premise runs)

Dataset

You must have a ddw-catalogs dataset set up to hold your catalog files when you are done running the collector.

If you are using Catalog Toolkit , follow these instructions to prepare the datasets for collectors.

Network connection

Allowlist IPs and domains



Setting up permissions

The collector supports the following authentication methods to Azure Synapse Analytics and Microsoft SQL Server - username/password authentication, NTLM authentication, and Microsoft Entra authentication methods such Active directory service principal and Active directory password authentication.

Setting up permissions for username and password authentication

The user you are using to run the collector needs at least SELECT ON DATABASE permission to access the metadata. Users need additional VIEW DEFINITION permission to harvest column-level lineage from views.

To set up permissions for username and password authentication:

  1. Create a new login <loginName> with password <password>.

    CREATE LOGIN <loginName> WITH PASSWORD = '<password>';

  2. Create a new user.

    CREATE USER <user> FOR LOGIN <loginName>;

  3. Grant SELECT ON DATABASE permissions to harvest catalog resources such as tables, views, and columns.

    GRANT SELECT ON DATABASE :: <databaseName> TO <user>;

  4. Grant VIEW DEFINITION permissions to harvest column-level lineage from views.

    GRANT VIEW DEFINITION ON DATABASE :: <databaseName> TO <user>;

  5. Grant execute sp_spaceused permissions to harvest the size of a table.

Setting up permissions for NTLM authentication

The computer running the collector must be attached to the Active Directory domain. The user you are using to run the collector needs at least SELECT ON DATABASE permission to access the metadata. Users need additional VIEW DEFINITION permission to harvest column-level lineage from views.

To set up permissions for NTLM authentication:

Important

The computer running the collector must be attached to the Active Directory domain.

  1. Create a service account that you want to use to run the collector.

  2. Grant SELECT ON DATABASE permissions to harvest catalog resources such as tables, views, and columns.

    GRANT SELECT ON DATABASE :: <databaseName> TO <user>;

  3. Grant VIEW DEFINITION permissions to harvest column-level lineage from views.

    GRANT VIEW DEFINITION ON DATABASE :: <databaseName> TO <user>;

  4. To gather optional table size information, give the user the public role. This allows the collector to run the sp_spaceused stored procedure. For more details, see the execute sp_spaceused documentation.

    Note

    Make sure that when you setup the collector (on-premise, cloud), you set the following two JDBC properties to use the NTLM authentication - integratedSecurity=true, authenticationScheme=NTLM

Setting up access for using Service Principal authentication

STEP 1: Register a new application:

  1. Go to the Azure Portal.

  2. Go to the App Registrations service.

  3. Click New Registration and enter the following information:

    • Application Name: Set as DataDotWorldSQLServerApplication.

    • Supported account types: Select Accounts in this organizational directory only.

  4. Click Register to complete the registration.

STEP 2: Create a client secret

  1. On the new application page you created, select Certificates and Secrets.

  2. Under the Client secrets tab, click the New client secret button.

  3. Add a Description.

  4. Set the expiration for the client secret.

  5. Click Add, and copy the secret value.

STEP 3: Grant Service Principal access to SQL Server

  1. In the in Azure portal, go to the SQL Server instance you want to catalog.

  2. Click on Access control (IAM).

  3. Click on Add Role Assignment.

  4. Select Reader under the Job function roles tab. Click Next.

  5. In the next page, make sure that Assign access to User, group or service principal is selected.

  6. Click on Select members. Search for DataDotWorldSQLServerApplication that was registered earlier. Click Select.

  7. Finally, click on Review + assign.

STEP 4: Grant Service Principal access to SQL Server database

  1. Login to the SQL Server using SQL Server Management Server.

  2. Run the following SQL command:

    CREATE USER [<service-principal>;] FROM EXTERNAL PROVIDER;

Setting up access for active directory password authentication

If the user running the collector is different from the Microsoft Entra Administrator, the user needs to be added to the database if not done so already.

To set up permissions for active directory password authentication:

  1. Login to the SQL Server or Synapse database using Microsoft Entra Administrator credentials.

  2. Add the user by running the following SQL command:

    CREATE USER [<user-or-service-principal>] FROM EXTERNAL PROVIDER;

Obtaining the server information for Azure Synapse

To find the fully qualified server name:

  1. Navigate to the Azure portal.

  2. Navigate to the Azure Synapse workspace you want to connect to.

  3. Click on Overview.

  4. The full server name is listed as Dedicated SQL endpoint. For example <synapse-workspace>.sql.azuresynapse.net

In this section: