724 questions with Azure Role-based access control tags

Sort by: Updated
Updated Created Answers
2 answers

create subscriptions

Hi All i have an Azure Tenant, i want to provide access to one of my user to create subscriptions. What level of access is required. Do the access needs to be provided at the management group level. Experts guide me.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
asked 2024-07-24T05:41:07.3933333+00:00
Glenn Maxwell 10,781 Reputation points
answered 2024-07-24T15:11:34.4266667+00:00
Glenn Maxwell 10,781 Reputation points
0 answers

Azure App Service - Custom Domain and SSL Binding

Hello, We have an Azure Web App Service, where we create custom domains. I was recently given access to the "Contributor" role for this web app. I am able to create and verify custom domains successfully. However, the SSL binding is failing due…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,395 questions
asked 2024-07-24T12:22:58.7433333+00:00
Anirudh Srinivas 0 Reputation points
4 answers

access to azure storage from React App

Hello, We are running a REACT app on an APP service. The APP has a BACK END in TS and a front end in REACT. In our application our customers can create posts with images. These images must be saved in a blob container. I cannot find the best solution to…

Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,634 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
asked 2024-07-05T12:10:40.5366667+00:00
Emmanuel de Nicolay 0 Reputation points
commented 2024-07-24T06:31:50.4566667+00:00
Nehruji R 4,691 Reputation points Microsoft Vendor
0 answers

Azure "Add role Assignment' is disabled. I have tried with both Owner and User Admin Access role.

Hello, I have both Owner and User Access Admin permission. But when I want to "add a role assignment for an Application" I noticed that my account for adding roles has been disable, see image How do I enable this option. Regards.

Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,933 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
asked 2024-07-23T22:05:48.3833333+00:00
Fahima Chowdhury 0 Reputation points Microsoft Employee
3 answers One of the answers was accepted by the question author.

Get-AzureADDirectoryRole and "Global Administrator" vs. "Company Administrator"

The documentation suggests "In the Microsoft Graph API and Azure AD PowerShell, this role is identified as "Company Administrator". It is "Global Administrator" in the Azure portal." This used to be the behaviour. However,…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,601 questions
asked 2021-01-18T02:56:59.323+00:00
Sayan Ghosh 316 Reputation points Microsoft Employee
commented 2024-07-23T21:57:23.01+00:00
Adebola Ige 0 Reputation points
1 answer

Limiting pipeline access in Azure DevOps

I am working on an Azure DevOps project and would like to add a new user to the project. However, I would like to restrict the user's access to code source or my repo while still allowing them to add and edit my pipeline and YAML files. Is there a way to…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
asked 2024-07-23T19:30:37.74+00:00
ELFIGHA, Oussama 0 Reputation points
commented 2024-07-23T21:30:50.99+00:00
Marcin Policht 18,015 Reputation points MVP
1 answer

Cannot change Entra ID's from another tenant as Classic Admins to RBAC roles in another tenant

Entra Id's from tenant 1 that are Classic Administrators in tenant 2 can't be switched over to RBAC roles. No rights assigned when we try.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
asked 2024-07-23T16:37:31.08+00:00
Darren Milbrandt 0 Reputation points
answered 2024-07-23T18:49:09.2833333+00:00
akinbade abiola 9,010 Reputation points
2 answers

How to access the Carbon Optimization Service as an admin?

Hello, With our admin account, it not possible to access the Carbon Optimization Service. But for the subscription selected, the account really has a role of Service Administrator, which should grant access to all the resources, right? It also doesnt…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
asked 2024-07-19T20:04:57.9+00:00
admin ogsl 0 Reputation points
answered 2024-07-23T08:55:18.4566667+00:00
Navya 6,770 Reputation points Microsoft Vendor
1 answer

Unusual Activity on admin account

Hello, I have an issue that my main administrative account on my Azure Portal has been limited due to unusual activity. I dont know what to do to get it unblocked but when I do check permissions on my resource group it just says unusual activity. Please…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
asked 2024-07-22T22:52:05.1333333+00:00
Jed Fletcher 0 Reputation points
edited the question 2024-07-23T08:45:02.16+00:00
AnuragSingh-MSFT 21,246 Reputation points
2 answers

How to delete/destroy an Azure account

Hello, I can't access to my Azure account, it was link to my previous company and their AD, and when i'm logging i have an issue : Message: AADSTS500213: The resource tenant's cross-tenant access policy does not allow this user to access this tenant. Is…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
asked 2024-07-22T12:40:02.4066667+00:00
Vincent MANOUKIAN 0 Reputation points
answered 2024-07-23T04:26:30.3766667+00:00
Sandeep G-MSFT 16,691 Reputation points Microsoft Employee
3 answers

Cannot create a support ticket

I am the owner of a blob storage account. I keep getting billed for things that I completely do not understand and the support pages on Azure suck. When I try to create a support ticket, I keep getting bumped to support pages that do not answer my…

Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
2,933 questions
Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
2,634 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
asked 2024-07-21T18:31:02.9666667+00:00
Thomas Hickson 0 Reputation points
commented 2024-07-22T23:27:36.9366667+00:00
Thomas Hickson 0 Reputation points
1 answer

How to Create a Incident managment and change management in Azure devops

Hi Team, I am looking to create an incident management and Change control process, can you please share some input. Regards, Krishna. This question is related to the following Learning Module

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
Outlook Management
Outlook Management
Outlook: A family of Microsoft email and calendar products.Management: The act or process of organizing, handling, directing or controlling something.
5,070 questions
asked 2024-07-17T16:33:46.7766667+00:00
Krishna 0 Reputation points
commented 2024-07-22T01:17:15.48+00:00
Joan Hua-MSFT 770 Reputation points Microsoft Vendor
2 answers One of the answers was accepted by the question author.

What is the cause of the following error - "getting assigned identities for pod <namespace>/<pod_name> in CREATED state failed after 20 attempts, retry duration [5]s" , while connecting to IMDS endpoint from a pod in AKS.

I am trying to connect to Azure Key vault via user assigned managed identity from a pod of AKS. I have provided the necessary RBAC role to the identity. I have created Azure Identity and Azure Identity Binding. I have updated my deployment with…

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,190 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
1,993 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,601 questions
asked 2024-07-08T17:50:19.59+00:00
Mahalingam Vignesh 20 Reputation points
accepted 2024-07-19T09:14:53.7433333+00:00
Mahalingam Vignesh 20 Reputation points
3 answers

Lighthouse

Hello All, I gave Contributor role (on a subscription) to users via Lighthouse to manage a customer. The users get access with no problem to the customer subscription, can start and stop VM, create a resource group, start and stop backup, etc. The…

Azure Lighthouse
Azure Lighthouse
An Azure service that provides secure managed services and access control for partners and customers.
72 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
asked 2024-06-19T10:07:04.94+00:00
Tristano,G,Giuseppe,JBP12 R 46 Reputation points
commented 2024-07-19T06:23:21.5433333+00:00
AnuragSingh-MSFT 21,246 Reputation points
2 answers

Scoping Custom Role With microsoft.directory/auditLogs/allProperties/read Role Permission

Hi Community, Can you have a custom role with the microsoft.directory/auditLogs/allProperties/read role permission and use Admin Units to scope to devices only? Is this a scope'able permission? Kind Regards, Jamie

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,601 questions
asked 2024-07-17T11:12:01.3233333+00:00
Jamie Brandwood 131 Reputation points
edited an answer 2024-07-17T12:38:54.85+00:00
Marcin Policht 18,015 Reputation points MVP
1 answer One of the answers was accepted by the question author.

Global reader unable to view any environment in admin.powerplatform.microsoft.com

We have PIM enabled and a user is enabled with Global reader access. User is able to access all other admin centers like exchange and can view the configuration but no configuration like environments, capacity is visible in powerplatform admin center. Is…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
asked 2021-05-07T08:23:39.297+00:00
hitender singh 131 Reputation points
commented 2024-07-17T11:40:56.55+00:00
Jayke Mori-Caruso 0 Reputation points
1 answer

What Azure role assignments would i need to allow a dba permissions to manage Azure SQL resources including storage accounts?

I am looking at assigning role assignments to a DBA to manage Azure SQL resources from the Azure Portal including managing a specific storage account. Currently, the permissions are set as follows: Contributor Reader SQL Security Manager …

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
asked 2022-06-10T12:42:30.167+00:00
Schieman, Paul 1 Reputation point
commented 2024-07-14T17:28:18.7+00:00
Iftekhar Alam 0 Reputation points
2 answers

azure owner roles issue

Hi Team, accidentally i was deleted my owner role attached to the my subscription . and now i am unable to perform operations in my account. could you please help me on this issue

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
asked 2024-07-12T04:48:21.28+00:00
Narasimharao 0 Reputation points
answered 2024-07-13T20:00:26.44+00:00
Dillon Silzer 56,521 Reputation points
1 answer

Azure Policy: check subscription role assignments

Hi everyone We have different types of users in our Azure AD. Only a certain subset of them are allowed to administer Azure resources. Those all start with "ACO" or "ACA". We now wish to create an Azure Policy that checks whether only…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
831 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,601 questions
asked 2023-03-16T08:43:26.8633333+00:00
Tobias Petter 6 Reputation points
answered 2024-07-12T14:54:55.09+00:00
Prashant Kumar 300 Reputation points Microsoft Employee
3 answers One of the answers was accepted by the question author.

Does such a user have access to adjacent sub-resources?

Hi, I have a question about user permissions Can someone please explain me to better understand user permissions: let's say under tenant root group, I create a user1 and management-group1. Under management group1, I create a subscription1 and user2.…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
724 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,601 questions
asked 2024-07-08T06:08:25.1033333+00:00
Mahdi 125 Reputation points
accepted 2024-07-09T12:03:52.0466667+00:00
Mahdi 125 Reputation points