675 questions with Azure Role-based access control tags

Sort by: Updated
Updated Created Answers
2 answers One of the answers was accepted by the question author.

Cannot See Index tagging in while uploading Blob in ADLS gen2

Azure Data Lake Storage
Azure Data Lake Storage
An Azure service that provides an enterprise-wide hyper-scale repository for big data analytic workloads and is integrated with Azure Blob Storage.
1,355 questions
Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,721 questions
Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,448 questions
Azure Databricks
Azure Databricks
An Apache Spark-based analytics platform optimized for Azure.
1,947 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
asked 2024-05-01T06:57:01.2766667+00:00
Alpha 20 Reputation points
accepted 2024-05-10T10:00:15.3233333+00:00
Alpha 20 Reputation points
2 answers

Link Audit logs to Groups or Role or Privilege

I am wondering how can I link the audit logs from Azure AD to Role, Group or Privilege? The logs just have the action and the category. Is there a way by which I can understand using what Role or Group privilege this action was taken?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
Microsoft Intune Grouping
Microsoft Intune Grouping
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Grouping: The arrangement or formation of people or things in a group or groups.
40 questions
asked 2024-04-30T17:53:28.7266667+00:00
Swapnil Khamkar 0 Reputation points
commented 2024-05-10T05:15:38.5133333+00:00
Crystal-MSFT 43,721 Reputation points Microsoft Vendor
0 answers

Teams calls going to Voicemail after elevating and deactivating access in PIM

When users elevate or deactivates access their calls go straight to voicemail. The only way to fix the issue is to quit teams and reload.

Microsoft Teams
Microsoft Teams
A Microsoft customizable chat-based workspace.
9,151 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
asked 2024-05-07T18:02:37.8+00:00
Brian W 5 Reputation points
commented 2024-05-09T13:01:12.4066667+00:00
Brian W 5 Reputation points
1 answer One of the answers was accepted by the question author.

Required help on correcting the Bicep template for assigning the role assignment at resource level scope

Hi, we are in the process of generating several public IPs using the provided Bicep template. Our goal is to allocate role assignments to all these IPs within the scope of the resource level. However, we are encountering numerous challenges in…

Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,179 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
asked 2024-05-08T12:17:55.7666667+00:00
Pardeep 80 Reputation points
accepted 2024-05-09T11:46:50.0266667+00:00
Pardeep 80 Reputation points
0 answers

azure.core.exceptions.ResourceNotFoundError: (MissingSubscription) The request did not have a subscription or a valid tenant level resource provider.

Azure Support Team, Requirement: To create a custom RBAC role using Python(3.12) Code is pasted below: On executing the code getting the following error azure.core.exceptions.ResourceNotFoundError: (MissingSubscription) The request did not have a…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
asked 2024-05-09T05:04:26.6933333+00:00
Anup Deshpande 0 Reputation points
1 answer

azure kubernetes ingress can't acces key vault's certificate

Okay I have azure kubernetes service with running dockerized app, with ingress(I used creating ingress (preview)) everything works fine except certificate, I created key vault, inside uploaded certificate to use for domain, I have "Azure…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,877 questions
asked 2023-11-13T16:40:27.4233333+00:00
Giorgi Kurdadze 0 Reputation points
answered 2024-05-08T09:49:50.1333333+00:00
Patricia Silva 0 Reputation points Microsoft Employee
1 answer

I am already an Azure Global Admin for our company but still, I cannot assign AVD/VMs to our users.

I am already an Azure Global Admin for our company but still, I cannot assign AVD/VMs to our users. I have assigned myself different admin roles that I can get but still, I can't do such assigning Azure Virtual Desktops to our users. Please help. Thanks.

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
7,188 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
asked 2024-05-08T06:13:41.8166667+00:00
Jordan Guillermo Admin 0 Reputation points
answered 2024-05-08T07:02:06.9733333+00:00
Luis Arias 5,046 Reputation points
1 answer

Received error while deploying Bicep. Error: "The role assignment request schedule is invalid. (InvalidRoleAssignmentRequestSchedule)"

Hi Team, I'm currently utilizing Bicep to enable Azure AD Privileged Identity Management (PIM) with a custom role. I've created an AD Group and assigned a Custom Role to it, which includes the following actions: "Microsoft.Authorization//read",…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,929 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,655 questions
asked 2024-05-06T11:49:58.59+00:00
Murali R 205 Reputation points
commented 2024-05-06T17:47:00.3833333+00:00
Murali R 205 Reputation points
2 answers One of the answers was accepted by the question author.

I need to assign a policy to the tenant root management group from a new user account.

what is the role needed for the user? How to do it?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
asked 2024-05-01T18:56:11.2833333+00:00
Linares Carramolino, Maria Concepción 20 Reputation points
accepted 2024-05-06T06:50:16.8133333+00:00
Linares Carramolino, Maria Concepción 20 Reputation points
0 answers

Azure B2C Sign In & Sign Up custom field still showing asterix on non-mandatory field

Hi Were using Azure B2C and specifically the Sign In 7 Sign Up User flow with our own Sign up template. I have added a custom field - 'Mobile Number' and we had previsouly set it to be mandatory. This rightly shows an asterix next to the label to inform…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
asked 2024-04-30T10:34:52.4433333+00:00
Neil Hodges 0 Reputation points
commented 2024-05-03T13:25:59.1633333+00:00
Neil Hodges 0 Reputation points
1 answer

If a user want to assign a policy to the tenant root management group, what role can do this?

Global administrator role? Owner role of the subscription?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
asked 2024-04-24T12:40:39.39+00:00
Shaojun Qin 100 Reputation points
commented 2024-05-03T04:21:57.45+00:00
Navya 4,155 Reputation points Microsoft Vendor
1 answer

Is it possible to receive notification emails when PIM (Privileged Identity Management) assignments are removed?

Hi all, As a global administrator I'm receiving email notifications when users are assigned any PIM Entra roles. However, when those user roles are removed by other administrators I'm not receiving any notifications. Is there any configuration I…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
Microsoft Entra
asked 2024-05-02T16:38:47.7+00:00
Shmuel Akura 0 Reputation points Microsoft Employee
answered 2024-05-02T16:47:30.61+00:00
David Broggy 5,681 Reputation points MVP
1 answer One of the answers was accepted by the question author.

AuthorizationPermissionMismatch error when accessing blob file with indirect permission in RBAC

Hi, I'm using BlobContainerClient for accessing blobs from code (C#) private async Task<BlobClient> GetBlobClientAsync(string blobName, string container, CancellationToken cancellationToken) { var containerClient = await…

Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,721 questions
Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,448 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
C#
C#
An object-oriented and type-safe programming language that has its roots in the C family of languages and includes support for component-oriented programming.
10,302 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,655 questions
asked 2024-04-18T23:01:28.29+00:00
Kamil Zak 20 Reputation points
accepted 2024-05-02T14:59:55.4033333+00:00
Kamil Zak 20 Reputation points
0 answers

Discussion around different ways to implement PIM for Azure resources

I've found there are two ways to use PIM to grant access to Azure resources and I'd like to understand the differences, if any, between the two. The outcome is the same however the process/workflow to achieve it is different. Method 1 Create an Entra ID…

Azure
Azure
A cloud computing platform and infrastructure for building, deploying and managing applications and services through a worldwide network of Microsoft-managed datacenters.
971 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,655 questions
asked 2024-01-30T07:07:38.8133333+00:00
KFM 86 Reputation points
commented 2024-04-30T15:31:51.71+00:00
AH 5 Reputation points
0 answers

Elevated Access for Azure AD Users

Hey guys, I'm managing 100 Azure AD users who utilize corporate-owned laptops for signing in and performing tasks. All these users are configured as standard users. Therefore, when the IT team runs an application with elevated access or doing…

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,792 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,655 questions
asked 2024-04-30T01:43:13.8666667+00:00
Mo 0 Reputation points
edited the question 2024-04-30T09:04:00.3066667+00:00
Givary-MSFT 28,486 Reputation points Microsoft Employee
1 answer One of the answers was accepted by the question author.

Azure Key Vault RBAC permissions required for APIM to retreive a cert?

Hi I have a Azure API manager setup and want to add a custom domain. We have deployed Azure Key Vault and uploaded a certificate. We have deployed Key Vault with the recommended "role-based access control" We have given the APIM managed…

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,135 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
asked 2024-02-18T20:52:19+00:00
SKT 141 Reputation points
commented 2024-04-29T22:32:57.6466667+00:00
Erik Jensen 0 Reputation points
2 answers

Assign RBAC "Key Vault Administrator" role to Azure App via C# (.NET SDK)

I use below C# code create KeyVault with RBAC permission model. using KeyVaultModels = Microsoft.Azure.Management.KeyVault.Models; KeyVaultModels.VaultProperties vaultProperties = new KeyVaultModels.VaultProperties() {   EnableRbacAuthorization = true,  …

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,135 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
Azure Automation
Azure Automation
An Azure service that is used to automate, configure, and install updates across hybrid environments.
1,131 questions
asked 2024-04-15T17:13:55.76+00:00
ASR 671 Reputation points
commented 2024-04-29T05:43:28.7966667+00:00
Akhilesh 5,090 Reputation points Microsoft Vendor
2 answers One of the answers was accepted by the question author.

What role will I have when I migrate a subscription to a new Tenant/Directory?

Hi All, Starting in September 2024 Classic Admins will be removed. I am wondering what is going to happen when I do a migration (directory change) of a subscription from one tenant to another. Usually the user who does the "Change Directory"…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,655 questions
asked 2024-04-24T09:31:31.7566667+00:00
John Doyle 51 Reputation points
commented 2024-04-26T09:21:50.7633333+00:00
John Doyle 51 Reputation points
2 answers One of the answers was accepted by the question author.

To add a backend pool and health probe to loadbalancer, which role is needed?

Network contributor on loadbalancer level? Network contributor on the resource group level?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
Azure Load Balancer
Azure Load Balancer
An Azure service that delivers high availability and network performance to applications.
404 questions
asked 2024-04-24T14:16:48.4233333+00:00
Shaojun Qin 100 Reputation points
accepted 2024-04-25T02:59:51.3+00:00
Shaojun Qin 100 Reputation points
1 answer

How to fix - MsalClaimsChallengeException: AADSTS53003: Access has been blocked by Conditional Access policies. The access policy does not allow token issuance.

Working on azure web app and it was working fine , suddenly i am getting below error MsalClaimsChallengeException: AADSTS53003: Access has been blocked by Conditional Access policies. The access policy does not allow token issuance. The same app is…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
675 questions
asked 2024-04-23T07:22:46.7333333+00:00
SohamPrasad Girde (Wipro Designit Services, Inc.) 20 Reputation points Microsoft Vendor
commented 2024-04-23T13:30:46.22+00:00
Domooney-MSFT 2,476 Reputation points Microsoft Employee