Purview Unified Catalog (Preview)
Use this connector to set up automation for Microsoft Purview Unified Catalog tasks and processes, including data product access.
Known issues or limitations:
To use a data product access workflow, you also have to check the box in Unified Catalog to skip the system workflow and use external workflow.
To manage a data product access workflow, you must have a Data Product Owner role on the data product.
This connector is available in the following products and regions:
| Service | Class | Regions |
|---|---|---|
| Copilot Studio | Premium | All Power Automate regions except the following: - US Government (GCC) - US Government (GCC High) - China Cloud operated by 21Vianet - US Department of Defense (DoD) |
| Power Apps | Premium | All Power Apps regions except the following: - US Government (GCC) - US Government (GCC High) - China Cloud operated by 21Vianet - US Department of Defense (DoD) |
| Power Automate | Premium | All Power Automate regions except the following: - US Government (GCC) - US Government (GCC High) - China Cloud operated by 21Vianet - US Department of Defense (DoD) |
| Contact | |
|---|---|
| Name | Microsoft |
| URL | https://support.microsoft.com |
| Connector Metadata | |
|---|---|
| Publisher | Microsoft, Purview Unified Catalog |
| Privacy policy | https://www.microsoft.com/en-US/privacy/privacystatement |
| Website | https://www.microsoft.com/en-US/security/business/microsoft-purview |
| Categories | Business Management;Data |
Several privacy regulations around the world grant individuals—or data subjects—the right to make requests to review or manage the personal data that companies have collected about them. These subject rights requests are also referred to as data subject requests (DSRs), data subject access requests (DSARs), or consumer rights requests. Fulfilling the requests, for most organizations, is a highly manual and time consuming process.
The Microsoft Purview Privacy Connector is designed to help alleviate the complexity and length of time involved in responding to data subject requests. The connector provides a way to automate the fulfillment of requests more confidently and efficiently.
Prerequisites
You will need the following to proceed:
- A Microsoft Purview Account.
- A Power Automate Account.
How to get credentials
Choose Trigger
Enter your Purview account and log in.
Connect to your Purview Account
When the trigger is called, the body will include a DSAR Id and Task Id. The flow must call the 'Get DSAR Details' action to get the information needed to process the request (assets, classifications and data subject identifiers). The flow will need this information to process the request.
Get DSAR Details
If the DSAR is an Export request, the flow must call the 'Upload Export Data' action to pass the user's data to the DSR Service.
Upload Export Data
After completing the request, the flow must call the 'Report DSAR Task Status' action to notify the DSR Service that it has finished. It must set the status to 'Completed' or 'Failed' depending on the execution result.
Update Task Status
Known issues and limitations
The connector will operate in the context of your user account, and will therefore be subject to your user permissions within the environment.
Creating a connection
The connector supports the following authentication types:
| Service principal authentication | Use your own Microsoft Entra ID app for service principal authentication. | All regions | Not shareable |
| Default [DEPRECATED] | This option is only for older connections without an explicit authentication type, and is only provided for backward compatibility. | All regions | Not shareable |
Service principal authentication
Auth ID: servicePrincipalAuth
Applicable: All regions
Use your own Microsoft Entra ID app for service principal authentication.
This is not shareable connection. If the power app is shared with another user, another user will be prompted to create new connection explicitly.
| Name | Type | Description | Required |
|---|---|---|---|
| Client ID | string | True | |
| Client Secret | securestring | True | |
| Tenant | string | True |
Default [DEPRECATED]
Applicable: All regions
This option is only for older connections without an explicit authentication type, and is only provided for backward compatibility.
This is not shareable connection. If the power app is shared with another user, another user will be prompted to create new connection explicitly.
| Name | Type | Description | Required |
|---|---|---|---|
| Client ID | string | True | |
| Client Secret | securestring | True | |
| Tenant | string | True |
Throttling Limits
| Name | Calls | Renewal Period |
|---|---|---|
| API calls per connection | 100 | 60 seconds |
Actions
| Approve data subscription |
Sets the status of the data subscription to 'Approved'. |
| Complete data subscription |
Sets the status of the data subscription to 'Completed'. |
| Reject data subscription |
Sets the status of the data subscription to 'Revoked'. |
Approve data subscription
Sets the status of the data subscription to 'Approved'.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
The ID of the data subscription
|
dataSubscriptionId | True | string |
The unique identifier of the data subscription. |
Complete data subscription
Sets the status of the data subscription to 'Completed'.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
The ID of the data subscription
|
dataSubscriptionId | True | string |
The unique identifier of the data subscription. |
Reject data subscription
Sets the status of the data subscription to 'Revoked'.
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
The ID of the data subscription
|
dataSubscriptionId | True | string |
The unique identifier of the data subscription. |
Triggers
| Data access request submitted on a business domain |
Triggers when data product access request is submitted in the business domain id provided |
| Data access request submitted on a data product |
Triggers when data product access request is submitted in the data product id provided |
| Data access request submitted on purview account |
Triggers when data product access request is submitted in the current reconciled Purview account |
Data access request submitted on a business domain
Triggers when data product access request is submitted in the business domain id provided
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
The ID of the business domain
|
businessDomainId | True | string |
The unique identifier of the business domain. |
Returns
| Name | Path | Type | Description |
|---|---|---|---|
|
dataSubscriptionId
|
dataSubscriptionId | string |
dataSubscriptionId |
|
dataProductId
|
dataProductId | string |
dataProductId |
|
dataProductName
|
dataProductName | string |
dataProductName |
|
businessDomainId
|
businessDomainId | string |
businessDomainId |
|
businessDomainName
|
businessDomainName | string |
businessDomainName |
|
requestorName
|
requestorName | string |
requestorName |
|
requestorId
|
requestorId | string |
requestorId |
|
subscriberName
|
subscriberName | string |
subscriberName |
|
subscriberId
|
subscriberId | string |
subscriberId |
|
useCase
|
useCase | string |
useCase |
|
businessJustification
|
businessJustification | string |
businessJustification |
|
managerApprovalRequired
|
managerApprovalRequired | string |
managerApprovalRequired |
|
managerApprovalId
|
managerApprovalId | string |
managerApprovalId |
|
privacyApproverRequired
|
privacyApproverRequired | string |
privacyApproverRequired |
|
privacyApproverId
|
privacyApproverId | string |
privacyApproverId |
Data access request submitted on a data product
Triggers when data product access request is submitted in the data product id provided
Parameters
| Name | Key | Required | Type | Description |
|---|---|---|---|---|
|
The ID of the data product
|
dataProductId | True | string |
The unique identifier of the data product. |
Returns
| Name | Path | Type | Description |
|---|---|---|---|
|
dataSubscriptionId
|
dataSubscriptionId | string |
dataSubscriptionId |
|
dataProductId
|
dataProductId | string |
dataProductId |
|
dataProductName
|
dataProductName | string |
dataProductName |
|
businessDomainId
|
businessDomainId | string |
businessDomainId |
|
businessDomainName
|
businessDomainName | string |
businessDomainName |
|
requestorName
|
requestorName | string |
requestorName |
|
requestorId
|
requestorId | string |
requestorId |
|
subscriberName
|
subscriberName | string |
subscriberName |
|
subscriberId
|
subscriberId | string |
subscriberId |
|
useCase
|
useCase | string |
useCase |
|
businessJustification
|
businessJustification | string |
businessJustification |
|
managerApprovalRequired
|
managerApprovalRequired | string |
managerApprovalRequired |
|
managerApprovalId
|
managerApprovalId | string |
managerApprovalId |
|
privacyApproverRequired
|
privacyApproverRequired | string |
privacyApproverRequired |
|
privacyApproverId
|
privacyApproverId | string |
privacyApproverId |
Data access request submitted on purview account
Triggers when data product access request is submitted in the current reconciled Purview account
Returns
| Name | Path | Type | Description |
|---|---|---|---|
|
dataSubscriptionId
|
dataSubscriptionId | string |
dataSubscriptionId |
|
dataProductId
|
dataProductId | string |
dataProductId |
|
dataProductName
|
dataProductName | string |
dataProductName |
|
businessDomainId
|
businessDomainId | string |
businessDomainId |
|
businessDomainName
|
businessDomainName | string |
businessDomainName |
|
requestorName
|
requestorName | string |
requestorName |
|
requestorId
|
requestorId | string |
requestorId |
|
subscriberName
|
subscriberName | string |
subscriberName |
|
subscriberId
|
subscriberId | string |
subscriberId |
|
useCase
|
useCase | string |
useCase |
|
businessJustification
|
businessJustification | string |
businessJustification |
|
managerApprovalRequired
|
managerApprovalRequired | string |
managerApprovalRequired |
|
managerApprovalId
|
managerApprovalId | string |
managerApprovalId |
|
privacyApproverRequired
|
privacyApproverRequired | string |
privacyApproverRequired |
|
privacyApproverId
|
privacyApproverId | string |
privacyApproverId |