Installing the Matillion Data Productivity Cloud app in Azure

Editions

This feature is for customers on our Enterprise edition only. Visit Matillion pricing to learn more about each edition.

When creating a new project in the Data Productivity Cloud, the Select project configuration page asks you to choose either Matillion managed or Advanced settings. Choosing Advanced settings enables you to connect your own Azure DevOps repository to your Data Productivity Cloud project. Once you connect your Azure DevOps repository to the Data Productivity Cloud, your data pipelines built using Designer can be committed and pushed to your Azure DevOps repository.

Read Prerequisites for connecting an Azure DevOps repository to the Data Productivity Cloud before installing the app.

Warning

Matillion strongly recommends that you use the new repository that you created and intend to connect to the Data Productivity Cloud solely for the purpose of developing your Designer pipelines.

Note

It may be advisable to use your repository's README file to describe the purpose of the repository and the pipelines developed therein.

Video example

Expand this box to watch our video about installing the Matillion Data Productivity Cloud app in Azure.

Video

How to install the app

During the project creation flow within the Data Productivity Cloud, choose Advanced settings from the Select project configuration page.
When prompted to choose an external Git provider, select Azure DevOps.
You will then be redirected to the Azure login portal.
If this is the first time you have logged in to Azure, you will receive a prompt for one of two options:
- If you have sufficient permissions within Azure, you will be asked to provide consent for the application to perform certain actions within Azure on your behalf.
- Otherwise, you will be informed you do not have the required permissions, and an Azure admin will be required to provide consent on your behalf.

Note

For the latter case requiring Azure admin intervention, read below for how to proceed.

Once the Matillion Data Productivity Cloud app is installed in your Azure tenant, you can continue creating your project in Designer and connect that project to an Azure DevOps repository.

Azure admin installation steps

If you are prompted for an admin to provide consent when attempting to authorize the Matillion for Azure DevOps application, this likely means that your Azure tenant has been configured to either require delegated consent for the app permissions, or explicit admin consent within the Azure portal.

Warning

Within the Azure prompt, Microsoft suggests logging in with admin credentials instead to proceed. Matillion strongly recommends against following this prompt, as this effectively captures the Azure admin OAuth token, rather than your user OAuth token. Any logins should only be for accounts that you have ownership or authority over, and Matillion does not recommend or expect any accounts to be shared under any circumstance.

Instead, the Azure admin will need to follow a number of steps:

They will need to be invited to your Matillion Data Productivity Cloud organization, and granted sufficient permissions within the Matillion organization to create a project.
After which, they need to follow the process of creating a new project, at least up to the point of choosing a repository within Azure DevOps.
- This is to ensure the Matillion for Azure DevOps application is successfully installed within the Azure tenant.
- Following this, the Azure admin can delegate consent through the Azure portal.
From the Azure portal, the Azure admin can find the Matillion for Azure DevOps application listed within the Enterprise Applications installed in the Azure tenant.
Next, either open or search for the Matillion for Azure DevOps application.
Depending on the security policies of your Azure tenant, the Azure admin will need to perform one or more of the following actions:
- If Assignment required? is set to Yes within the Manage → Properties menu blade, then assign the users who are intending to use the Matillion Data Productivity Cloud within the Manage → Users and groups menu blade, both of which can be found in the left-hand sidebar.
- If the intended users can't provide User consent for applications, then the Azure admin can provide tenant-wide consent on behalf of the users from the Security → Permissions menu blade.

This will allow either the granted users, or all tenant users respectively, to proceed with the authorization step within the Data Productivity Cloud and accept the application permissions requested to act upon their behalf.

One-time installation

You only need to install the Matillion Data Productivity Cloud app in your Azure tenant once, unless it is explicitly removed by an Azure admin from your tenant in the Azure portal. After the app is installed, whenever you create a new project in the Data Productivity Cloud, you can connect to any repositories that your Azure user account has access to.