Automate adding ADF managed identity into Purview Data Curator role.

[andrehass]

Unable to push lineage to Purview because Purview Data Curator role is not granted to factory's managed identity.
ADF can't connect to purview to push lineage.

After adding ADF Managed Identity in the Purview Data Curator role, ADF can connect and send data lineage to Purview.

[marvinbuss]

Thanks @andrehass for submitting this. Suggestion until now was to add all Data Factories and Synapse workspaces to a security group and then assign them. But you are right, we should probably include the option to automatically have this set up for the user. I will look into it next week.

[marvinbuss]

We will first get #190 and Azure/data-management-zone#209 in main and then work on this enhancement, ok?

[marvinbuss]

Hi @andrehass,
I just looked into this and sadly, we are not able to automate this without a self-hosted agent. The endpoints are on the data plane and AAD also does not expose any ARM APIs to automatically create a group in which all ADF MSIs are included. I would mark this item as blocked and raise this with PG.

[marvinbuss]

I will close this since it is the same issue as #114.