Front Door Cache Purge - What specific role needed

Rajesh Ambakkat 216 Reputation points
2022-05-16T20:58:25.18+00:00

In my classic front door, is there a specific role i can assign to user or service principal to invalidate the cache in front door? i just need the SPN to do only cache purge on front door , nothing else. Is this possible? If this granular level permission is not available what other options i can use to cache purge on front door. Basically i dont want to give anyother permission to anyone other than cache purge?

Do i have to write a logic app or function to do it if it is not possible?

Azure Front Door
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
577 questions
0 comments
Accepted answer
  1. GitaraniSharma-MSFT 47,011 Reputation points Microsoft Employee
    2022-05-17T10:57:18.007+00:00

    Hello @Rajesh Ambakkat ,

    Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

    I understand that you would like to assign a specific role to a user or service principal to do only cache purge on front door.

    You could restrict the permissions with RBAC custom roles and assign the below role to allow a user to do cache purge on Azure Front Door:
    Microsoft.Network/frontDoors/purge/action - Purge cached content from a Front Door

    Refer : https://learn.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftnetwork
    https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles
    https://learn.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal?tabs=current

    Kindly let us know if the above helps or you need further assistance on this issue.

    ----------------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Tchimwa Sougang 931 Reputation points Microsoft Employee
    2022-05-17T19:43:15.273+00:00

    @Rajesh Ambakkat , thank you for your question. Here it depends on your AFD SKU, if it is classic, it will not be possible as there not an option to purge a particular domain with the classic.
    if you are using the new AFD Standard/Premium, you should be able to purge a particular endpoint as you can see from the link below:
    https://learn.microsoft.com/en-us/azure/frontdoor/standard-premium/how-to-cache-purge#configure-cache-purge