Stack Overflow
Stack Overflow

Questions tagged [azure-rbac]

Topics relating to Azure Role Base Access Control

264 questions
0
votes
1 answer

Is there way to restrict resource access by other 'Owners' in the same Azure Subscription?

There are a bunch of people in a Security Group and the Group itself is owner of the subscription. So all the members of the group will obviously have full access to all the resources under the subscription. Removing the people from the SG is a…
Dhiraj
  • 3,396
  • 4
  • 41
  • 80
0
votes
1 answer

Azure Automation Privileges

I have two subscriptions. On one subscription I run logic apps and on the logic apps I have azure functions. The other subscription contain target resources for the automation via logic apps and azure functions. In order to run the Logic Apps and…
kay106
  • 65
  • 5
0
votes
2 answers

Azure Sentinel RBAC - Best Practice

We are in the process of implmenting Sentinel with several data sources, what is the best way to do the RBAC?
kay106
  • 65
  • 5
0
votes
1 answer

App registrations, server and client, one for each cluster or reuse for all my clusters?

I'm creating a couple of Kubernetes clusters using Azure AKS. I'll create a cluster for each environment. Dev, test and prod. In the process I'm creating two ad apps. One for the server and one for the client. Should I create a pair for each…
user672009
  • 4,379
  • 8
  • 44
  • 77
0
votes
1 answer

How to allow user to create and deploy container in Azure

I am trying to use RBAC to allow other developers to deploy containers in Azure without giving full admin rights. I tried adding as reader and contributor, didn't seem to work. Has anyone else implemented this/have any other ideas?
cdr
  • 1
0
votes
1 answer

What permissions are required to create Azure subscriptions and tenants?

According to this blog the Classic Account Admin can create Subscriptions. Is there anyone else who can create subscriptions as well? Can he delegate this administrative task through AAD roles? In the new RBAC approach do we still have a 'Classic'…
Gadam
  • 2,674
  • 8
  • 37
  • 56
0
votes
2 answers

How to add permission to builtin role in storage account using Azure Python SDK?

I have a storage account and I want to give permission to one of my App Service in "Storage Account Key Operator Service Role". Similar to the below action in Azure portal.
himanshu219
  • 654
  • 7
  • 22
0
votes
2 answers

Retrieving the all the users information from Azure Subscription

I want to retrieve all the user information from Subscription. We can get all the user list from an Azure subscription using below article. https://learn.microsoft.com/en-us/rest/api/authorization/roleassignments/list But above URl retrieves list of…
Avinash
  • 2,053
  • 2
  • 14
  • 32
0
votes
1 answer

Granting READER role access to a Subscription in Azure works fine in Postman, but not via Angular. Why?

OK, I might be missing something simple here in Angular, but I could really use some help. I am trying to grant a Service Principal READER role to a Subscription programmatically. If I use PostMan, it works fine. However, when I send the same PUT…
Dana Epp
  • 509
  • 1
  • 5
  • 13
0
votes
1 answer

azure cannot "create Run as account"

Daniel explains it here how to start and stop a VM located on Azure. I cannot do this as I cannot find Create Azure Run As Account I believe my account is limited by the account owner. What do I Need to ask to get this permission? I have a…
juliand
  • 23
  • 5
0
votes
1 answer

Azure roleassignment list not fetching full list

I am using REST API to fetch all role assignments at subscription scope. I don't have the nextLink and still don't have full list of role assignments. I noticed this question has no replies either. So looking for any help with resolution on this. I…
arbit
  • 1
0
votes
1 answer

What role is needed to view policy compliance in Azure?

I would like a user to have read only access to policy compliance if possible but I can't seem to figure out which permissions they need. I've looked over the policy permissions and they have read access on the policies but still are unable to read…
user9360564
  • 355
  • 1
  • 4
  • 13
0
votes
1 answer

azure container with RBAC

I am trying to understand how can I run a python application inside azure container that can spin up various resources like VM, route-table inside resource group of Azure. http://azure-sdk-for-python.readthedocs.io/en/latest/ Looks like the…
explorer
  • 737
  • 1
  • 8
  • 23
0
votes
1 answer

Can you restrict users from using certain connectors in azure logic apps?

I've looked through all the permissions a user can have in regards to logic apps but I still have not be able to answer my question. Is it possible to restrict a user from using a certain connector in azure logic apps? For example, lets say I wanted…
user9360564
  • 355
  • 1
  • 4
  • 13
0
votes
2 answers

Azure - My new azure account cannot access my resources

My azure admin e-mail account with godaddy, but for "reasons", this e-mail was deleted from godaddy server, with the problem solved, I was able to create a new account, with the same credentials that I had for azure admin, and it works, I can login…
user2299254
  • 13
  • 2
1 2 3
…
17
18