<dependency>    <groupId>com.azure</groupId>    <artifactId>azure-messaging-eventhubs</artifactId>    <version>5.20.2</version></dependency><dependency>    <groupId>com.azure</groupId>    <artifactId>azure-identity</artifactId>    <version>1.16.1</version>    <scope>compile</scope></dependency>

<dependency>    <groupId>com.azure</groupId>    <artifactId>azure-messaging-eventhubs</artifactId>    <version>5.20.2</version></dependency>

Assign roles to your Microsoft Entra user

When you develop locally, make sure that the user account that connects to Azure Event Hubs has the correct permissions. You need theAzure Event Hubs Data Owner role to send and receive messages. To assign yourself this role, you need the User Access Administrator role, or another role that includes theMicrosoft.Authorization/roleAssignments/write action. You can assign Azure RBAC roles to a user using the Azure portal, Azure CLI, or Azure PowerShell. For more information, seeUnderstand scope for Azure RBAC page.

The following example assigns theAzure Event Hubs Data Owner role to your user account, which provides full access to Azure Event Hubs resources. In a real scenario, follow thePrinciple of Least Privilege to give users only the minimum permissions needed for a more secure production environment.

Azure built-in roles for Azure Event Hubs

For Azure Event Hubs, the management of namespaces and all related resources through the Azure portal and the Azure resource management API is already protected using the Azure RBAC model. Azure provides the following built-in roles for authorizing access to an Event Hubs namespace:

• Azure Event Hubs Data Owner: Enables data access to Event Hubs namespace and its entities (queues, topics, subscriptions, and filters).
• Azure Event Hubs Data Sender: Use this role to give the sender access to Event Hubs namespace and its entities.
• Azure Event Hubs Data Receiver: Use this role to give the receiver access to Event Hubs namespace and its entities.

If you want to create a custom role, seeRights required for Event Hubs operations.

az eventhubs namespace show -g '<your-event-hub-resource-group>' -n '<your-event-hub-name>' --query id

az role assignment create --assignee "<user@domain>" \--role "Azure Event Hubs Data Owner" \--scope "<your-resource-id>"

Get-AzResource -ResourceGroupName "<your-event-hub-resource-group>" -Name "<your-event-hub-name>"

New-AzRoleAssignment -SignInName <user@domain> `-RoleDefinitionName "Azure Event Hubs Data Owner" `-Scope <yourResourceId>

Get the connection string

Creating a new namespace automatically generates an initial Shared Access Signature (SAS) policy with primary and secondary keys and connection strings that each grant full control over all aspects of the namespace. For information about how to create rules with more constrained rights for regular senders and receivers, seeEvent Hubs authentication and authorization.

A client can use the connection string to connect to the Event Hubs namespace. To copy the primary connection string for your namespace, follow these steps:

1. On theEvent Hub Namespace page, selectShared access policies on the left menu.

2. On theShared access policies page, selectRootManageSharedAccessKey.

3. In thePolicy: RootManageSharedAccessKey window, select the copy button next toPrimary Connection String, to copy the connection string to your clipboard for later use. Paste this value into Notepad or some other temporary location.

   

   You can use this page to copy primary key, secondary key, primary connection string, and secondary connection string.

Add a class namedSender, and add the following code to the class:

package ehubquickstart;import com.azure.messaging.eventhubs.*;import java.util.Arrays;import java.util.List;import com.azure.identity.*;public class SenderAAD {    // replace <NAMESPACE NAME> with the name of your Event Hubs namespace.    // Example: private static final String namespaceName = "contosons.servicebus.windows.net";    private static final String namespaceName = "<NAMESPACE NAME>.servicebus.windows.net";    // Replace <EVENT HUB NAME> with the name of your event hub.     // Example: private static final String eventHubName = "ordersehub";    private static final String eventHubName = "<EVENT HUB NAME>";    public static void main(String[] args) {        publishEvents();    }    /**     * Code sample for publishing events.     * @throws IllegalArgumentException if the EventData is bigger than the max batch size.     */    public static void publishEvents() {        // create a token using the default Azure credential                DefaultAzureCredential credential = new DefaultAzureCredentialBuilder()                .authorityHost(AzureAuthorityHosts.AZURE_PUBLIC_CLOUD)                .build();        // create a producer client                EventHubProducerClient producer = new EventHubClientBuilder()                    .fullyQualifiedNamespace(namespaceName)            .eventHubName(eventHubName)            .credential(credential)            .buildProducerClient();        // sample events in an array        List<EventData> allEvents = Arrays.asList(new EventData("Foo"), new EventData("Bar"));        // create a batch        EventDataBatch eventDataBatch = producer.createBatch();        for (EventData eventData : allEvents) {            // try to add the event from the array to the batch            if (!eventDataBatch.tryAdd(eventData)) {                // if the batch is full, send it and then create a new batch                producer.send(eventDataBatch);                eventDataBatch = producer.createBatch();                // Try to add that event that couldn't fit before.                if (!eventDataBatch.tryAdd(eventData)) {                    throw new IllegalArgumentException("Event is too large for an empty batch. Max size: "                        + eventDataBatch.getMaxSizeInBytes());                }            }        }        // send the last batch of remaining events        if (eventDataBatch.getCount() > 0) {            producer.send(eventDataBatch);        }        producer.close();    }   }

Add a class namedSender, and add the following code to the class:

import com.azure.messaging.eventhubs.*;import java.util.Arrays;import java.util.List;public class Sender {    private static final String connectionString = "<Event Hubs namespace connection string>";    private static final String eventHubName = "<Event hub name>";    public static void main(String[] args) {        publishEvents();    }}

Add code to publish events to the event hub

Add a method namedpublishEvents to theSender class:

    /**     * Code sample for publishing events.     * @throws IllegalArgumentException if the EventData is bigger than the max batch size.     */    public static void publishEvents() {        // create a producer client        EventHubProducerClient producer = new EventHubClientBuilder()            .connectionString(connectionString, eventHubName)            .buildProducerClient();        // sample events in an array        List<EventData> allEvents = Arrays.asList(new EventData("Foo"), new EventData("Bar"));        // create a batch        EventDataBatch eventDataBatch = producer.createBatch();        for (EventData eventData : allEvents) {            // try to add the event from the array to the batch            if (!eventDataBatch.tryAdd(eventData)) {                // if the batch is full, send it and then create a new batch                producer.send(eventDataBatch);                eventDataBatch = producer.createBatch();                // Try to add that event that couldn't fit before.                if (!eventDataBatch.tryAdd(eventData)) {                    throw new IllegalArgumentException("Event is too large for an empty batch. Max size: "                        + eventDataBatch.getMaxSizeInBytes());                }            }        }        // send the last batch of remaining events        if (eventDataBatch.getCount() > 0) {            producer.send(eventDataBatch);        }        producer.close();    }

When you develop locally, make sure that the user account that accesses blob data has the correct permissions. You needStorage Blob Data Contributor to read and write blob data. To assign yourself this role, you need to be assigned theUser Access Administrator role, or another role that includes theMicrosoft.Authorization/roleAssignments/write action. You can assign Azure RBAC roles to a user using the Azure portal, Azure CLI, or Azure PowerShell. For more information, seeUnderstand scope for Azure RBAC.

In this scenario, you assign permissions to your user account, scoped to the storage account, to follow thePrinciple of Least Privilege. This practice gives users only the minimum permissions needed and creates more secure production environments.

The following example assigns theStorage Blob Data Contributor role to your user account, which provides both read and write access to blob data in your storage account.

az storage account show --resource-group '<your-resource-group-name>' --name '<your-storage-account-name>' --query id

az role assignment create --assignee "<user@domain>" \    --role "Storage Blob Data Contributor" \    --scope "<your-resource-id>"

Get-AzResource -ResourceGroupName "<yourResourceGroupname>" -Name "<yourStorageAccountName>"

New-AzRoleAssignment -SignInName <user@domain> `    -RoleDefinitionName "Storage Blob Data Contributor" `    -Scope <yourStorageAccountId>

Get the connection string to the storage account.

Note down theconnection string and thecontainer name. You use them in the receive code.

Add the following dependencies in the pom.xml file.

• azure-messaging-eventhubs
• azure-messaging-eventhubs-checkpointstore-blob
• azure-identity

<dependencies><dependency>    <groupId>com.azure</groupId>    <artifactId>azure-messaging-eventhubs</artifactId>    <version>5.20.2</version></dependency><dependency>    <groupId>com.azure</groupId>    <artifactId>azure-messaging-eventhubs-checkpointstore-blob</artifactId>    <version>1.20.6</version></dependency><dependency>    <groupId>com.azure</groupId>    <artifactId>azure-identity</artifactId>    <version>1.16.1</version>    <scope>compile</scope></dependency></dependencies>

Add the following dependencies in the pom.xml file.

• azure-messaging-eventhubs
• azure-messaging-eventhubs-checkpointstore-blob

<dependencies><dependency>    <groupId>com.azure</groupId>    <artifactId>azure-messaging-eventhubs</artifactId>    <version>5.20.2</version></dependency><dependency>    <groupId>com.azure</groupId>    <artifactId>azure-messaging-eventhubs-checkpointstore-blob</artifactId>    <version>1.20.6</version></dependency></dependencies>

1. Add the followingimport statements at the top of the Java file.

   import com.azure.messaging.eventhubs.*;import com.azure.messaging.eventhubs.checkpointstore.blob.BlobCheckpointStore;import com.azure.messaging.eventhubs.models.*;import com.azure.storage.blob.*;import java.util.function.Consumer;import com.azure.identity.*;

2. Create a class namedReceiver, and add the following string variables to the class. Replace the placeholders with the correct values.

   Important

   Replace the placeholders with the correct values.

   • <NAMESPACE NAME> with the name of your Event Hubs namespace.
   • <EVENT HUB NAME> with the name of your event hub in the namespace.

   private static final String namespaceName = "<NAMESPACE NAME>.servicebus.windows.net";private static final String eventHubName = "<EVENT HUB NAME>";

3. Add the followingmain method to the class.

   Important

   Replace the placeholders with the correct values.

   • <STORAGE ACCOUNT NAME> with the name of your Azure Storage account.
   • <CONTAINER NAME> with the name of the blob container in the storage account

   // create a token using the default Azure credentialDefaultAzureCredential credential = new DefaultAzureCredentialBuilder()        .authorityHost(AzureAuthorityHosts.AZURE_PUBLIC_CLOUD)        .build();// Create a blob container client that you use later to build an event processor client to receive and process eventsBlobContainerAsyncClient blobContainerAsyncClient = new BlobContainerClientBuilder()        .credential(credential)        .endpoint("https://<STORAGE ACCOUNT NAME>.blob.core.windows.net")        .containerName("<CONTAINER NAME>")        .buildAsyncClient();// Create an event processor client to receive and process events and errors.EventProcessorClient eventProcessorClient = new EventProcessorClientBuilder()    .fullyQualifiedNamespace(namespaceName)    .eventHubName(eventHubName)    .consumerGroup(EventHubClientBuilder.DEFAULT_CONSUMER_GROUP_NAME)    .processEvent(PARTITION_PROCESSOR)    .processError(ERROR_HANDLER)    .checkpointStore(new BlobCheckpointStore(blobContainerAsyncClient))                .credential(credential)    .buildEventProcessorClient();System.out.println("Starting event processor");eventProcessorClient.start();System.out.println("Press enter to stop.");System.in.read();System.out.println("Stopping event processor");eventProcessorClient.stop();System.out.println("Event processor stopped.");System.out.println("Exiting process");

1. Add the followingimport statements at the top of the Java file.

   import com.azure.messaging.eventhubs.*;import com.azure.messaging.eventhubs.checkpointstore.blob.BlobCheckpointStore;import com.azure.messaging.eventhubs.models.*;import com.azure.storage.blob.*;import java.util.function.Consumer;

2. Create a class namedReceiver, and add the following string variables to the class. Replace the placeholders with the correct values.

   Important

   Replace the placeholders with the correct values.

   • <Event Hubs namespace connection string> with the connection string to your Event Hubs namespace. Update
   • <Event hub name> with the name of your event hub in the namespace.
   • <Storage connection string> with the connection string to your Azure storage account.
   • <Storage container name> with the name of your container in your Azure Blob storage.

   private static final String connectionString = "<Event Hubs namespace connection string>";private static final String eventHubName = "<Event hub name>";private static final String storageConnectionString = "<Storage connection string>";private static final String storageContainerName = "<Storage container name>";

3. Add the followingmain method to the class.

   public static void main(String[] args) throws Exception {    // Create a blob container client that you use later to build an event processor client to receive and process events    BlobContainerAsyncClient blobContainerAsyncClient = new BlobContainerClientBuilder()        .connectionString(storageConnectionString)        .containerName(storageContainerName)        .buildAsyncClient();    // Create a builder object that you will use later to build an event processor client to receive and process events and errors.    EventProcessorClientBuilder eventProcessorClientBuilder = new EventProcessorClientBuilder()        .connectionString(connectionString, eventHubName)        .consumerGroup(EventHubClientBuilder.DEFAULT_CONSUMER_GROUP_NAME)        .processEvent(PARTITION_PROCESSOR)        .processError(ERROR_HANDLER)        .checkpointStore(new BlobCheckpointStore(blobContainerAsyncClient));    // Use the builder object to create an event processor client    EventProcessorClient eventProcessorClient = eventProcessorClientBuilder.buildEventProcessorClient();    System.out.println("Starting event processor");    eventProcessorClient.start();    System.out.println("Press enter to stop.");    System.in.read();    System.out.println("Stopping event processor");    eventProcessorClient.stop();    System.out.println("Event processor stopped.");    System.out.println("Exiting process");}