Skip to main content

Connector Lifecycle

Deleting a source triggers an approval workflow based on your organization’s settings. Once approved, the source and all associated metadata are permanently deleted. The deletion cannot be undone after approval.
Existing metadata, quality scores, and alerts are retained while the connector is inactive. No new data is collected until the connector is re-enabled.
The default data retention window for time-series observability data and quality score history is 90 days.

Setup & Configuration

Only clusters that are currently running or resizing are listed. Start your cluster, then refresh the dropdown.
Your ADLS credentials are missing list permission on the storage account. Confirm the identity has Storage Blob Data Reader (source container) or Storage Blob Data Contributor (managed-storage container) as appropriate.
Your credentials don’t have read access to that specific container. The dropdown lists every container in the account because Prizm can’t filter it to read-access-only containers for a service principal or access token — but Prizm still checks read access on selection. If it fails, a toast appears and the container is auto-removed. Choose a container your credentials can read, or ask your Azure administrator to grant access.
Not at this time. Databricks is the only supported external Spark engine today.
This is handled through agent-outbound connectivity rather than manual firewall rules. Confirm agent-outbound is correctly configured and reachable for your environment. If jobs still fail to reach ADLS, contact your Prizm account team.

Authentication & Permissions

If you’re using a Service Principal, check whether the Azure client secret has expired — an expired secret prevents Prizm from reading ADLS. If you’re using Managed Identity, there’s no secret to expire — check instead whether the role assignments on the Access Connector are still in place.
Confirm the Access Connector (or service principal) has been granted the correct role on the correct container — Storage Blob Data Reader on the source container, Storage Blob Data Contributor on the managed-storage container — and that role propagation has completed. This can take a few minutes.
This almost always means the identity has Storage Blob Data Reader instead of Storage Blob Data Contributor on the write container, or is missing Storage Blob Delegator at the storage-account level. Confirm both are assigned.
Storage Blob Delegator must be assigned at the storage-account scope, not the container scope — a container-scoped assignment will not enable delegation-key issuance. Re-check the scope of the role assignment, not just its presence.
Confirm external data access is enabled at the metastore level and the Trino principal has EXTERNAL USE SCHEMA on the schema — table-level grants alone are not sufficient for external engine access.

Troubleshooting

For connection errors, permission issues, and performance problems.

Glossary

For definitions of terms used in this FAQ.