Topics relating to Azure Role Base Access Control
Questions tagged [azure-rbac]
264 questions
0
votes
1 answer
Block access to a specific pipeline in ADF
I have a pipeline named "Privacy Pipeline".
I would like to only one person to be able to access this pipeline "user@data.com"
Is it possible to apply RBAC IAM controls at this level?
I've tried creating a custom role in Access control in the data…
Cromwell1540
- 1
- 1
0
votes
1 answer
Get-AzRoleAssignment -SignInName "XXX" is not filtering the Role Assignments of the Resource Level via PowerShell
Currently I am trying to automate the Azure Role Assignments using PowerShell script. When I use "Get-AzRoleAssignment -SignInName "XXX""- I can get the details for some of the users. However, the same command won't return any data for certain…
Mano K
- 1
- 1
0
votes
1 answer
I want to give 'Owner' access on subscription level for users, but exclude few resource groups
I want to give 'Owner' access on subscription level for users, but exclude few resource groups.
I want to give 'Owner' access on subscription level for users, but exclude few resource groups. Is there any way ?
siva reddy
- 3
- 2
0
votes
1 answer
Trigger Azure Data Factory Pipeline using Postman
I'm kinda lost, I'm trying to trigger a pipeline manually using the following:
POST…
Yzak
- 81
- 2
- 13
0
votes
1 answer
Prevent all the users from creating the subscription directly under the Azure Tenant level
I'm trying to write a custom policy to prevent all kind of users from creating the subscription directly under the Tenant level. Rather, the subscriptions should only be created under the Management group level.
Tried multiple ways in authoring and…
Shan
- 7
- 1
0
votes
1 answer
Control Access To Azure SQL Server Admin Password Reset In Azure Portal
Is it possible thru RBAC (Role Based Access) to control who can use the reset password feature on the an Azure SQL Server in the Azure Portal
Jared
- 175
- 1
- 13
0
votes
1 answer
Flux can not seem to apply Kustomization
I have recently been trying to get flux to work on an AKS I made from scratch. using this script that I made:
$rg = "fluxtestingaks"
$aks = "fluxaks"
$acr = "fluxaksacr"
$location = "uksouth"
$tenant = ""
$output = az login --tenant $tenant
if…
Jason
- 510
- 5
- 27
0
votes
1 answer
ADFv2 Azure Restrict Access to the Publish button
[Update]
Changes to ADF are deployed using the new CI/CD flow here. SO developers don't need to click publish to manually push changes to create a ARM template.
So developers need to have permissions to develop within ADF but don't need to access to…
Geezer
- 513
- 5
- 17
0
votes
1 answer
Is it possible to grant permission for create resource group to service principal if no subscriptions are available?
I try to grant permission for create resource group to service principal in my UWP C# project. I use Azure SDK for .NET to create confidential application registration and acquire access token. It is worked with my extension methods, to prevent…
Stanislav
- 33
- 1
- 5
0
votes
1 answer
Assign Owner access on multiple resources in azure
I have 300+ resource groups in Azure and i want to assign Owner access to 250 resource groups. Individually I have to assign the owner access on each resource group is time consuming task. Is there is any other way to do this?
Hi All,
I have 300+…
siva reddy
- 3
- 2
0
votes
1 answer
Azure Custom RBAC with wildcard in assinableScopes - is it possible?
I am trying to create Azure Custom RBAC and it accepts wildcard in action/noaction but it does not work when I try wildcard in assinableScopes.
I need to restrict permissions for certain resource group but I don't know the exact name of the resource…
Prodip
- 436
- 8
- 21
0
votes
1 answer
Only allow encryption access for key in Azure Key Vault with Azure RBAC enabled
I have an Azure Key Vault with Azure RBAC enabled. I have a key in that vault that I use for encryption and decryption. I would like to only allow admins to use the key to decrypt data. Regular users should only be able to encrypt data using the…
Joel
- 8,502
- 11
- 66
- 115
0
votes
1 answer
Bicep roleAssignments/write permission error when assigning a role to Keyvault
I am using GitHub Actions to deploy via Bicep:
- name: Login
uses: azure/login@v1
with:
creds: ${{ secrets.AZURE_CREDENTIALS }}
- name: Deploy Bicep file
uses: azure/arm-deploy@v1
with:
scope: subscription
…
Adam
- 3,872
- 6
- 36
- 66
0
votes
2 answers
Role assignment removed still has access
I have a Azure Function and configured the Authentication with Microsoft as provider.
After that I granted a role assignment for another Azure Function Managed Identity on Access Control (IAM)
It worked fine, my second Azure function was able to…
0
votes
1 answer
Add RBAC to Azure Kubernetes ( AKS ) after the cluster has already been created
I need to add RBAC to my AKS, but when I go to Azure portal it says that it's a creation operation and that it's not possible to update it afterwards.
Do I need to tear down the whole cluster and create a new one with RBAC enabled to make use of…
Domenico
- 1