Job submission failed, the user <data lake analytics account name> does not have permissions to a subfolder RRS feed

  • Question

  • Job submission failed, the user '<data lake analytics account name>' does not have permissions to a subfolder in the /system/ path needed by Data Lake Analytics. Please run “Add User Wizard” from the Data Lake Analytics Azure Portal or use Azure PowerShell to grant access for the user to the /system/ and its children on the Data Lake Store.

    The data factory seems to treat the "name" of the data lake analytics account as an user and complains about permissions.

    I have U-SQL transform activity with Azure Data Lake Analytics linked service.

        "name": "LsDataLakeAnalytics",
        "properties": {
            "type": "AzureDataLakeAnalytics",
            "typeProperties": {
                "accountName": "<data lake analytics account name>",
                "authorization": "**********",
                "sessionId": "**********",
                "subscriptionId": "xxxxxxxx",
                "resourceGroupName": "xxxxxxx"

    I'm a super user in the default Data Lake Store and I authorized the linked service with my organization credentials. I even checked my access to /system/ folder path and I got RWX access. What am I doing wrong?


    Thursday, November 24, 2016 5:47 PM

All replies

  • Hi Subash.S,

    Have you added your Data Lake Store as the data source of your Data Lake Analytics?  Looks like your ADLA has no access to your ADLS.

    Monday, November 28, 2016 7:47 AM
  • On further investigation it was down to Firewall settings on Data Lake Store. When switched off the Firewall, Data Lake Analytics was able to access Data Lake Store.


    We need to further figure out how to have Firewall on in ADLS and give ADLA access to ADLS at the same time. Thanks.


    Monday, November 28, 2016 5:45 PM
  • Hi subash,

    I got same error while access ADLA from ADF. Can you help me in figuring it out?

    I Provided the client address of the ADL-A that is Available in FireWall Settings. But Both ADL-A And ADLA has the same Client IP Address .

    what I need to do in order to run the ADL-A script from ADF?

    Friday, March 31, 2017 7:51 PM