Planned scope
Prizm would catalog Synapse pipelines, activities, triggers, and data flows, monitor run status, duration, and failures, and derive table-level lineage from Copy and Data Flow activities.Planned permissions
Pipeline permissions are Synapse RBAC roles, assigned in Synapse Studio under Manage → Access control → Add, at workspace scope. The Azure portal doesn’t assign them, and Azure Owner or Contributor doesn’t grant them. The Azure Reader role on the workspace is also needed, because Pipelines and the Monitoring Hub use the Azure Resource Manager API.<workspace>.dev.azuresynapse.net on port 443. SQL authentication does not apply to pipelines.