Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated setup Azure doc following Slack post #6087

Merged
merged 20 commits into from
Sep 20, 2024
Merged
Changes from 8 commits
Commits
Show all changes
20 commits
Select commit Hold shift + click to select a range
8fa1b61
Updated setup Azure doc following Slack post
nataliefiann Sep 18, 2024
61f8785
Update website/docs/docs/cloud/git/setup-azure.md
nataliefiann Sep 18, 2024
7e01e51
Update website/docs/docs/cloud/git/setup-azure.md
nataliefiann Sep 18, 2024
61a6a11
Update website/docs/docs/cloud/git/setup-azure.md
nataliefiann Sep 18, 2024
772d698
Update website/docs/docs/cloud/git/setup-azure.md
nataliefiann Sep 18, 2024
113baad
Updated doc to add an expandable
nataliefiann Sep 18, 2024
425945f
Update website/docs/docs/cloud/git/setup-azure.md
nataliefiann Sep 19, 2024
3259018
Merge branch 'current' into nfiann-ADOandSSO
mirnawong1 Sep 19, 2024
8ecf203
Update setup-azure.md
mirnawong1 Sep 19, 2024
fa4d460
Update website/docs/docs/cloud/git/setup-azure.md
nataliefiann Sep 19, 2024
fc47a9e
Update website/docs/docs/cloud/git/setup-azure.md
nataliefiann Sep 19, 2024
547bb44
Update website/docs/docs/cloud/git/setup-azure.md
nataliefiann Sep 19, 2024
3cbda5a
Update website/docs/docs/cloud/git/setup-azure.md
nataliefiann Sep 19, 2024
e85f040
Update website/docs/docs/cloud/git/setup-azure.md
mirnawong1 Sep 19, 2024
379641c
Update website/docs/docs/cloud/git/setup-azure.md
nataliefiann Sep 19, 2024
a381c3b
Merge branch 'current' into nfiann-ADOandSSO
nataliefiann Sep 19, 2024
867c129
Update website/docs/docs/cloud/git/setup-azure.md
nataliefiann Sep 19, 2024
9a32b42
Update website/docs/docs/cloud/git/setup-azure.md
nataliefiann Sep 19, 2024
e802ce2
Merge branch 'current' into nfiann-ADOandSSO
nataliefiann Sep 20, 2024
3df1671
Merge branch 'current' into nfiann-ADOandSSO
nataliefiann Sep 20, 2024
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 12 additions & 1 deletion website/docs/docs/cloud/git/setup-azure.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ To use our native integration with Azure DevOps in dbt Cloud, an account admin n
4. [Connect Azure DevOps to your new app](#connect-azure-devops-to-your-new-app).
5. [Add your Entra ID app to dbt Cloud](#add-your-azure-ad-app-to-dbt-cloud).

Once the Microsoft Entra ID app is added to dbt Cloud, an account admin must also [connect a service user](#connecting-a-service-user) via OAuth, which will be used to power headless actions in dbt Cloud such as deployment runs and CI.
Once the Microsoft Entra ID app is added to dbt Cloud, an account admin must also [connect a service user](/docs/cloud/git/setup-azure#connect-a-service-user) via OAuth, which will be used to power headless actions in dbt Cloud such as deployment runs and CI.


Once the Microsoft Entra ID app is added to dbt Cloud and the service user is connected, then dbt Cloud developers can personally authenticate in dbt Cloud from Azure DevOps. For more on this, see [Authenticate with Azure DevOps](/docs/cloud/git/authenticate-azure).
Expand Down Expand Up @@ -373,6 +373,17 @@ A dbt Cloud account admin with access to the service user's Azure DevOps account

Once connected, dbt Cloud displays the email address of the service user so you know which user's permissions are enabling headless actions in deployment environments. To change which account is connected, disconnect the profile in dbt Cloud, sign into the alternative Azure DevOps service account, and re-link the account in dbt Cloud.

<Expandable alt_header="I can't select the service user, dbt Cloud automatically connects my personal user" >
nataliefiann marked this conversation as resolved.
Show resolved Hide resolved
nataliefiann marked this conversation as resolved.
Show resolved Hide resolved

If you're using Azure AD for SSO with dbt Cloud and Microsoft tools, the SSO flow may sometimes direct your account admin to their personal user account. If this happens instead of prompting to connect a service account, they can follow these steps to resolve it:
nataliefiann marked this conversation as resolved.
Show resolved Hide resolved

1. Sign in to the service user's Azure DevOps account (they should also make sure they are connected to dbt Cloud via SSO).
nataliefiann marked this conversation as resolved.
Show resolved Hide resolved
2. When connected to dbt Cloud, sign out of Azure AD through the [Azure portal](https://portal.azure.com/).
3. From there, disconnect the service user in dbt Cloud and go through the steps to set it up again.
nataliefiann marked this conversation as resolved.
Show resolved Hide resolved
4. You should then be prompted for service user credentials.
nataliefiann marked this conversation as resolved.
Show resolved Hide resolved

</Expandable>
nataliefiann marked this conversation as resolved.
Show resolved Hide resolved
nataliefiann marked this conversation as resolved.
Show resolved Hide resolved

:::info Personal Access Tokens (PATs)
dbt Cloud leverages the service user to generate temporary access tokens called [PATs](https://learn.microsoft.com/en-us/azure/devops/organizations/accounts/use-personal-access-tokens-to-authenticate?toc=%2Fazure%2Fdevops%2Fmarketplace-extensibility%2Ftoc.json&view=azure-devops&tabs=Windows).

Expand Down
Loading