Stack Overflow
Stack Overflow

Questions tagged [azure-rbac]

Topics relating to Azure Role Base Access Control

264 questions
0
votes
0 answers

How to add role claims to AzureAD token for Managed Identity?

The role assignments claims aren't coming through on receiving a token from AzureAD in our tenant for managed identities. Here's an example of a token returned by AzureAD for the client id of an app registration: Here's the token returned by…
AngryToddlers
  • 55
  • 8
0
votes
1 answer

How to get the role assignments of a resource through Resource Graph API?

I want to use the Azure Resource Graph API to get the role assignments of a resource (who are owners, contributors, etc.). That is, I want to create a query that finds the role assignments for a specific resource id that I provide. I've been going…
Azgu
  • 19
  • 1
0
votes
1 answer

How to create Azure Policy?

I have written some automation (using az command line) that creates virtual machines for us. However, since users have contributor access to the various subscriptions they login to the portal and create the vm's manually. I would like to prevent the…
souser
  • 5,868
  • 5
  • 35
  • 50
0
votes
1 answer

Azure policy to deny assigning any of the existing custom roles to users

As a part of Azure Governance, I want to deny all the members(owners) from assigning an existing custom role to any user at subscription or resource group level. I'm wondering it is even possible. If so, what would be the policy? I achieved a policy…
Shan
  • 7
  • 1
0
votes
0 answers

How to use Microsoft login info to access an Azure application using MSAL auth for react?

I am working on a single page application (SPA) app that grants access to specific paths in the application, based on roles setup in Azure AD for the user logging in. As per this…
Skadoosh
  • 699
  • 2
  • 11
  • 27
0
votes
1 answer

I'm unable to Login to VM with Azure AD user credentials

I'm unable to login to Azure Virtual Machine with Azure AD credential even if select the Option Azure AD Domain Joined while creating the Azure VM. I'm always getting The Logon attempt failed error. Assigned Azure Virtual Machine Administration User…
Jinnyroy
  • 15
  • 6
0
votes
2 answers

How to assign custom role to the application in Bicep

Getting no permission to add Azure roles to the account message. I am trying to add Azure role assignments to the storage account. I am creating a function app in bicep, and the next step after that is, I want to add the 'Storage Blob Data Owner'…
Bobby Jose
  • 1
  • 4
0
votes
1 answer

Assign Roles to multiple users and System Identity using Powershell?

I have requirement to assign Azure Roles to multiple users on subscription scope and Reader role to Managed Identity-Storage Account. 1.Assign Azure RBAC roles to multiple users 2.Assign system assigned managed identity to existing Virtual Machine,…
Jinnyroy
  • 15
  • 6
0
votes
1 answer

How to filter custom directory roles from Powershell Or CLI

I have few custom directory roles with specific permissions. I attempted to do it from graph but no use, throwing errors. Is there any other possible way to get that list from Powershell Or CLI. Get-AzRoleDefinition Getting all roles, how to add…
Sanam7
  • 21
  • 5
0
votes
1 answer

List custom created directory roles programmatically

I created some custom directory roles with specific permissions. I have to list these custom roles in a programmatic way. This gives list of all directory roles in…
Sanam7
  • 21
  • 5
0
votes
2 answers

How to customize Subscription contributor role for blocking Storage in Azure

I have a requirement to customize the contributor role at Azure Subscription level, such that, people added to that customized contributor role can NOT view or read the data from the storage account (under that subscription). This is how i'm doing…
AskMe
  • 2,495
  • 8
  • 49
  • 102
0
votes
1 answer

Prevent access to Production resources using Azure Custom RBAC

I have one subscription which contains all Dev, Test, and Prod resources. I have created a custom RBAC role that grants access to limited azure resources. However, I want to restrict access to Production resources. Can I limit this using the wild…
Vinayak S B
  • 41
  • 7
0
votes
1 answer

Error in ARM/Bicep template using deploymentScript running Azure command

I have a Bicep template with a deployment script in it deploymentScript that should execute a certain Azure command. But when I run my template it returns this error when it runs the deploymentScript: The service does not have access…
Vivendi
  • 20,047
  • 25
  • 121
  • 196
0
votes
1 answer

Where to find TemplateId while creating custom directory role MS Graph

I want to create custom directory role with specific permissions…
Sanam7
  • 21
  • 5
0
votes
1 answer

How do I enable RBAC access for a group to view Function App "Log Stream" in Azure?

How do I enable RBAC access for a group to view Function App "Log Stream" in Azure? Basically, I have a AD group with an assignee ID. I don't know how to find the "scope id" for the "Log Stream". My users have contributor access to the Function…
djangofan
  • 28,471
  • 61
  • 196
  • 289
1 2 3
…
17 18