stevecinva / azuredatalakemanagement

Simplify the management of ACL's in an ADLS Gen2 Azure Data Lake

AzureDataLakeManagement

This project was created to help simplify the process of managing an Azure Datalake specifically around updating existing ACL's to child objects within the lake. Yes, this can be accomplished with Azure Storage Explorer, however come customers don't like to install new software.

My goal, is to make a straight forward set of functions that will assist a user in configuring folders and the associated ACL's in an ADLS Gen 2 storage container using the objects names rather than ID's.

To contribute to this project please view the GitHub project at https://github.com/SteveCInVA/AzureDataLakeManagement

---

Version History:

• 2024.1.1 - 01/09/2024 Issue 22 - Fixed issue where a lack of Azure Permissions to Microsoft.Storage/storageAccounts/listKeys/action would cause failure to execute even with correct AzureAD permissions on objects.

• 2023.12.3 - 12/01/2023 Published via Github Actions to PowershellGallery.com

• 2023.12.2 - 12/01/2023 Removed - Github Action Publish testing

• 2023.12.1 - 12/01/2023 Function optimization and improved consistency of help content.

• 2023.11.2 - 11/13/2023 Added function to remove an ACL from a folder and all inherited children

azuredatalakemanagement's Issues

Root Container ACL

As a user, I need to be able to set an ACL on a particular container.

Setting of MASK when configuring ACL

As a user, I want the mask to always be configured with read / write / execute no matter what permission was configured first.

User Required to have ListKeys/Action permission

A user who is provisioned with Azure Active Directory, but does not have access to Microsoft.Storage/storageAccounts/listKeys/action fails to execute

error thrown when folder path starts with a slash

when using the get-azuredatalakefolderacl function and passing in a -foldepath, if the folder starts with a '' before a folder the function fails.

Consistent documentation

Add help documentation across all functions.
Update example.ps1 file

Add the ability to manage resource locks (enable / disable) locks

As a user I need the ability to disable a resource or resource group lock that is blocking the ability to delete certain permissions.
In addition, there should be functionality that enables the re-creation of a resource or resource group lock.
Should be able to specify the lock type (delete / read-only).

Unable to remove permissions

As a user I need the ability to remove a person from an ACL and have it go to all child objects below.

Unable to find guest accounts in AD

As a user I need to be able to set permissions for users who are guests in my ad tenant.

Move data lake content

As a user I want a way to bulk move content between folders in the datalake.

File Upload

As a user I want the ability to upload a file from my local machine using powershell to a particular folder in the datalake.
By default the script should error if the file already exists, but have a flag that would allow overwrites to occur.

Set Default for folderpath

When using the get-datalakefolderacl function, default the -folderpath parameter to '' if nothing is presented