> For the complete documentation index, see [llms.txt](https://docs.rootcause.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.rootcause.ai/data-sources-and-connectors/connectors/azure-data-lake.md).

# Azure Data Lake

Import files from Azure Data Lake Storage (Gen2) containers, or query Parquet in them directly.

***

### Setting up the connection

1. In the Import Manager, click the **Azure Data Lake** card
2. Choose one of four authentication methods, then fill in its fields:

| Auth method       | Fields                                               |
| ----------------- | ---------------------------------------------------- |
| Connection String | The storage account connection string                |
| Account Key       | Account Name + Account Key                           |
| Service Principal | Account Name + Tenant ID + Client ID + Client Secret |
| Managed Identity  | Account Name (for deployments running inside Azure)  |

All methods also take a **Default Container**, the storage container used for imports.

3. Click **Test connection** to verify, then **Save & continue**

***

### Importing data

Browse under **Select Container, Folder, and File**, or type the container and blob path, for example `exports/2026/sales.parquet`. Format is auto-detected (CSV, Parquet or JSON) and sub-folders can be included. A multi-file import creates a folder source with one child per file.

***

### Import modes

Full Import, Full Import + Live, Recent Rows, Time Period and Query Directly. Rolling windows re-read the path on each sync and need a single object. Query Directly reads Parquet only. See [Connectors](/data-sources-and-connectors/connectors.md).

***

### Troubleshooting

**Authorization failure**

* For service principals, grant the Storage Blob Data Reader role on the account or container

**Container not found**

* Container names are lowercase; check the Default Container

**Firewall**

* If the storage account restricts networks, allow RootCause's address