Azure App access

How to approve Eddytor as Enterprise Application in Entra ID

In order to approve Eddytor in Entra ID, you need to use it for the first time as an admin.

1. Go to app.eddytor.com
2. Enter your email address
3. You will receive a magic link by email — click it to sign in
4. Click Connect to data
5. Click Azure
6. Log in with an admin account
7. Approve the application access for all in the organization
8. Select a storage account and select a container. The user logged in needs to have Reader access to a storage account and Storage Blob Data Contributor on the storage account or the container.
9. Approve additionally required permission for the application
10. Done

Why these permissions are needed

The primary purpose of this app is to allow users to edit and manage data in Azure Storage accounts, specifically interacting with Delta tables and inputting data. The app requires certain permissions to let users perform these actions while ensuring they do so securely and within their existing access rights.

By granting these permissions, the app allows users to operate as themselves within the software. This means users can only make changes to the storage accounts or data they already have permission to access — nothing more. The app doesn't provide users with any extra privileges; it simply facilitates their ability to perform the same actions they would manually, but more efficiently through the app.

For example:

• If a user has access to specific Delta tables, they can edit or input data into those tables directly through the app, but they cannot access or alter tables or storage accounts they do not have permissions for.
• The app uses Microsoft's secure authentication methods, so users continue working within their existing security boundaries, ensuring compliance with your organization's access controls.

This setup ensures that users can manage their data in Azure Storage safely, with the app acting as a secure tool that respects the access limitations already in place.

Specific Enterprise app API access prompted for approval

All permissions are delegated and require admin consent. An administrator must approve these permissions for the organization.