This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(236.8, 48%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
Hi,
I am getting error "not Authorized to Access account" when trying to enable "Data policy enforcement (previously Data use management)" ON for azure storage blob resource in Purview -> data map -> data resources.
My user id is the subscription owner, I have also got privileges of "Data source admins", "Collection admin".
The managed identity of the purview root collection has also been given the privileges of "storage account contributor", "storage blob data owner" and "storage blob data reader". My user has also been assigned these roles.
But still when I try to switch "Data policy enforcement (previously Data use management)" ON for azure storage blob resource in Purview -> data map -> data resources, I am getting the error ""not Authorized to Access account".
Please share a solution to this issue if anyone has faced this problem.
Thanks & Regards.
Pinaki
A unified data governance solution that helps manage, protect, and discover data across your organization
my userid and the root collection maneged identity already has owner on the storage account and Data source admin on the root collection in purview. However, I do not have user access administrator role. But microsoft documentation says owner role is sufficient for this acitvity?
MY userid already has policy author role in purview but this didn't help to resolve the error. Do you want me to give the managed identity of the root collection policy author role? Also, when you say IAM owner role do you mean subscription owner role? I have checked my userid's role for the azure blob storage account, it has subscription(inherited) owner role for the storage account.