Questions tagged [azure-rbac]

Topics relating to Azure Role Base Access Control

264 questions
0
votes
1 answer

AuthorizationFailed while using AZ CLI

Today I have tried to perform action on Azur ADF using CLI (Portal for that subscription can be only used as "read") AZ CLI is installed on AZ VM that via Managed identity has received Contributor role on the whole subscription. Running command…
Niviral
  • 187
  • 1
  • 4
  • 14
0
votes
1 answer

Custom Role in Azure Synapse

Can i create a Custom role or edit existing role in Azure Synapse, where i can provide only SELECT query access using Built-in serverless Pool and Pipelines access should be restricted Ideally i'm looking for a role who can only read SQL & Lake…
0
votes
2 answers

Azure Service Bus - Topic - Message Attribute Based Access Control

I have an Azure Service Bus topic. Messages send to the topic contain application properties. I want to set permissions on the topic based on values of one or more application properties, i.e. only when identity A sends a message with property e.g.…
0
votes
1 answer

Azure Blueprint deny read access to some admins

I need to allow only a couple of administrators access to a ressource group, I tried blueprints using the UI but I am only able to lock delete. Is it possible to block reading a ressource or ressource group? do I need to use REST API for that?
Anass Kartit
  • 2,017
  • 15
  • 22
0
votes
1 answer

Failed to create Azure storage account via Postman

I am trying to create storage account via Postman. I created one service principal via Azure Portal and got access token with below…
user3394
  • 31
  • 5
0
votes
0 answers

Azure Custom Owner Role

I am trying to create an Azure custom owner role, where I give certain access. I will assign this role to a RBAC group and add users to that group. However how do I make it so that this role can only assign this specific role and only see this role.
Hinda
  • 27
  • 1
  • 7
0
votes
1 answer

RBAC Auth Issue API - Internal Server Error

I have been trying to use RBAC checkAccess endpoint and I am receiving a 500 error - InternalServerErrror. This is what I tried: var rbacUri…
0
votes
1 answer

Unable to customize sign-in page of my tenant

I have created users in my Azure AD tenant using bulk create template in Azure Portal. I want to customize the sign-in page when my users are logging in to Azure Portal. I found that we can use company branding to achieve that. But, I cannot find…
Ashish8970
  • 17
  • 4
0
votes
1 answer

Hierarchical RBAC system for Azure Active Directory

I'm looking for a hierarchical RBAC system to be used with Azure Active Directory accounts. With the hierarchical RBAC system I would like to authorize users to have access and be in roles in a hierarchical structure, e.g.: Customer 1 role:…
Serge van den Oever
  • 4,340
  • 8
  • 45
  • 66
0
votes
1 answer

App Service retrieve secret from Key vault with RBAC using Azure AD group

We are setting up an Azure App Service (Web app) that needs to get some secrets from a Key vault. For this, we have enabled System assigned identity for the web app. The Key vault is using RBAC and we decided to create an Azure AD group to give…
0
votes
1 answer

Difference between managing resources vs accessing resources in Azure RBAC

What is the difference between managing resources vs accessing resource in Azure RBAC. If I can manage the resource then definitely I can access them. I am unable to understand the difference. Can someone pls provide me the clarity
0
votes
1 answer

Azure Custom Role for Operators and Developers

We are currently review our user access permission for Azure. We want to review and further refine the existing/built-in roles that came with Azure. For example, the Contributor access may be a bit too much in some instance. Specifically, below…
Ultra GC
  • 311
  • 4
  • 15
0
votes
1 answer

Any permissions are missing Azure RBAC vs Power shell?

Powershell command 'az role assignment list --assignee user@company.com --all' is giving result in powershell but no results for below code snippet. TokenCredential azureCliCredential = new…
dev4java
  • 86
  • 1
  • 8
0
votes
1 answer

How to create custom RBAC/ABAC role in Azure?

The requirement is to create access package with few roles so that the users can perform below activities: Read & write access to data stored in a given blob container ('abc' blob container). Role to access azure data factory to build pipeline,…
AskMe
  • 2,495
  • 8
  • 49
  • 102
0
votes
1 answer

Azure Java SDK - how to retrieve RBAC roles of an User

We have a requirement to check the Authorization permissions of an User before executing business logic. I am not able to find an example or tutorial to retrieve the Roles of an User, using Azure Java SDK.
dev4java
  • 86
  • 1
  • 8