Merge pull request #2107 from chintalavr/js_ag

Updated data pipeline documentation with troubleshooting instructions.

docs/azure_jumpstart_ag/contoso_supermarket/data_pos/_index.md

@@ -58,6 +58,8 @@ Follow the below steps in order to view the PoS Orders dashboard reports you wil
 
   ![Screenshot showing the empty data in orders dashboard report](./img/adx_orders_report_empty_data.png)
 
+  > __NOTE: Depending on the type of user account being used to access ADX dashboards, you might have issues accessing data in the _Orders_ database in the ADX cluster with an error _User principal 'msauser=[email protected]' is not authorized to read database 'Orders'_. If you experience this access issue, refer to [Jumpstart Agora - Contoso Supermarket scenario troubleshooting](https://azurearcjumpstart.io/azure_jumpstart_ag/contoso_supermarket/troubleshooting#user-principal-is-not-authorized-to-read-database-orders) guide to troubleshoot and address this access issue__.
+
 ## Generate sample data using Data Emulator
 
 By default there is no data available in Cosmos DB database after the deployment is complete. There are two ways you can generate Orders data. One method is using PoS application and place orders. Another option is by using Data Emulator tool available on the Agora client VM. Use instructions below to generate sample data using the Data Emulator tool.

docs/azure_jumpstart_ag/contoso_supermarket/freezer_monitor/_index.md

@@ -76,6 +76,8 @@ To view the Freezer Monitoring dashboard you will first need to import it into A
 
   ![Screenshot showing the default freezer dashboard](./img/adx_freezer_dashboard_default.png)
 
+  > __NOTE: Depending on the type of user account being used to access ADX dashboards, you might have issues accessing data in the _Orders_ database in the ADX cluster with an error _User principal 'msauser=[email protected]' is not authorized to read database 'Orders'_. If you experience this access issue, refer [Jumpstart Agora - Contoso Supermarket scenario troubleshooting](https://azurearcjumpstart.io/azure_jumpstart_ag/contoso_supermarket/troubleshooting#user-principal-is-not-authorized-to-read-database-orders) guide to troubleshoot and address this access issue__.
+
 ## Scenarios
 
 Below are a few scenarios that Contoso Supermarket might encounter, and how they can be addressed using the data collected by the IoT sensors.

docs/azure_jumpstart_ag/contoso_supermarket/troubleshooting/_index.md

@@ -61,3 +61,26 @@ After deploying Agora, if you try to access the Kubernetes resources on the clus
 
 - To able to access the Kubernetes resources on the AKS cluster from the Azure portal, follow the guidance mentioned in [this article](https://learn.microsoft.com/azure/aks/kubernetes-portal?tabs=azure-cli#unauthorized-access).
 - To able to access the Kubernetes resources on the AKS Edge Essentials clusters from the Azure Portal, follow the guidance mentioned in [this article](https://learn.microsoft.com/azure/azure-arc/kubernetes/cluster-connect).
+
+### User principal is not authorized to read database Orders
+
+Depending on the type of user account being used to access ADX dashboards, you might have issues accessing data in the _Orders_ database in the ADX cluster. Microsoft Accounts (MSAs) are all of the Microsoft-managed non-organizational user accounts. For example, **_hotmail.com, live.com, outlook.com_**. These MSAs require special syntax to grant database access permissions in the ADX cluster. Refer to [Referencing security principals](https://learn.microsoft.com/azure/data-explorer/kusto/management/referencing-security-principals#microsoft-accounts-msas) to use the correct syntax to grant user permissions to the ADX database.
+
+The screenshot below shows a permissions error when using MSAs.
+
+  ![Screenshot showing the principal not authorized to read database error](./img/adx-principal-not-authorized.png)
+
+Follow the below steps to address this permissions error.
+
+- In the [Azure portal](https://portal.azure.com/), locate the ADX cluster deployed in the resource group and open.
+- Click on _Query_ under Data, select the _Orders_ database, and enter the Kusto query as shown below to grant user access to the _Orders_ database. Replace the user principal with the correct principal to grant permissions.
+
+  ```kusto
+  .add database Orders users ('[email protected]') 'XYZ (hotmail.com)'
+  ```
+
+- Click _Run_ to execute the Kusto query to grant permissions.
+
+  ![Screenshot showing how to grant user permissions](./img/adx-database-grant-user-access.png)
+
+- Once user permission is granted go to [ADX dashboards](https://dataexplorer.azure.com/dashboards) and refresh the dashboard report to view _Orders_ data.