Is it impossible to share the gallery image between other accounts In Azure?

sol 1 Reputation point
2022-05-12T09:29:26.86+00:00

Account A - Gallery Image Created by Subscription A
Account B - You are about to create a vm from a resource in the b subscription.

Is this possible?

https://learn.microsoft.com/ko-kr/azure/virtual-machines/linux/share-images-across-tenants#create-a-vm-using-azure-cli
When proceeding according to the relevant manual, The client has permission to perform action 'Microsoft.Compute/galleries/images/versions/read error will occur.

Granting the b account owner's permission, gallery's reading, and owner's permission also results in a permission error.

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,129 questions
Azure Migrate
Azure Migrate
A central hub of Azure cloud migration services and tools to discover, assess, and migrate workloads to the cloud.
717 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Vidya Narasimhan 2,201 Reputation points Microsoft Employee
    2022-05-13T19:17:30.213+00:00

    Hi @sol , you can share gallery images with users/groups/servicePrinciples using RBAC as described here
    https://learn.microsoft.com/en-us/azure/virtual-machines/share-gallery?tabs=portal

    2 people found this answer helpful.
    0 comments No comments

  2. Prrudram-MSFT 21,966 Reputation points
    2022-05-16T12:35:22.647+00:00

    Hello @sol ,

    Thank you for reaching out to the Microsoft Q&A platform. Happy to answer your question.

    Shared Image Gallery introduces three new resources that help with managing customer images. In order of hierarchy, these are:

    1. Shared Image Gallery
    2. Image Definition
    3. Image Version

    Like @Vidya Narasimhan suggested each of the three new resource types introduced with Shared Image Gallery can be shared with another user, service principal or an AD group through Role Based Access Control. Once shared, a VM or virtual machine scale sets (VMSS) can be created in any subscription within the same AD tenant as the image.

    202361-image.png

    How can I list all the Azure Compute Gallery resources across subscriptions?
    To list all the Azure Compute Gallery resources across subscriptions that you have access to on the Azure portal, follow the steps below:

    Open the Azure portal.
    Scroll down the page and select All resources.
    Select all the subscriptions under which you'd like to list all the resources.
    Look for resources of the Azure Compute Gallery type.

    Can I replicate my image versions across subscriptions?
    No, you may replicate the image versions across regions in a subscription and use it in other subscriptions through RBAC.

    References: https://azure.microsoft.com/en-in/blog/azure-shared-image-gallery-now-generally-available/
    https://learn.microsoft.com/en-us/azure/virtual-machines/shared-image-galleries#can-i-replicate-my-image-versions-across-subscriptions

    Please "Accept as Answer" and Upvote if the answer provided is useful, so that you can help others in the community looking for remediation for similar issues.

    0 comments No comments