814 questions with Azure Role-based access control tags

Sort by: Updated
Updated Created Answers
2 answers One of the answers was accepted by the question author.

Automatically disable to report inactive account in Azure / Entra ID?

I'm curious if there's a built-in feature in Microsoft Entra ID or Azure AD that can automatically disable or remove users whose SignInActivity logs and LastSuccessfulSignInDate are empty. I need to disable them if no activity has been logged in the…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,892 questions
Microsoft Entra Private Access
Microsoft Entra Private Access
Microsoft Entra Private Access provides secure and deep identity-aware, Zero Trust network access to all private apps and resources.
65 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,904 questions
asked 2024-02-19T10:41:53.83+00:00
EnterpriseArchitect 5,406 Reputation points
answered 2024-10-18T19:24:26.63+00:00
Scott Timmings 0 Reputation points
0 answers

VA2107 - Remove members who should not have access to the database role

ALTER ROLE [UserRole] DROP MEMBER [Principal], is this the correct remediation script for VA2107

Azure SQL Database
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
SQL Server
SQL Server
A family of Microsoft relational database management and analysis systems for e-commerce, line-of-business, and data warehousing solutions.
13,866 questions
asked 2024-10-17T06:20:38.8533333+00:00
Biswas, Sauvik 0 Reputation points
commented 2024-10-18T14:03:16.1366667+00:00
NIKHILA NETHIKUNTA 2,790 Reputation points Microsoft Vendor
0 answers

Custom role created at the resource group level

I have created a custom role at the resource group level, however I need to duplicate this across multiple environments and I would like to know the most effective way to do this. I am concerned if I need to alter the role slightly, it can get cumbersome…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
asked 2024-10-17T21:00:17.0433333+00:00
MrFlinstone 581 Reputation points
commented 2024-10-18T05:48:17.2233333+00:00
BANDELA Siri Chandana 80 Reputation points Microsoft Vendor
1 answer

disableLocalAuth for cosmos db

Attempting to use RBAC authentication to connect to Cosmos DB results in different behaviors based on the disableLocalAuth setting. When disableLocalAuth is set to false, the connection to Cosmos DB is successful, and data can be retrieved. However,…

Azure Cosmos DB
Azure Cosmos DB
An Azure NoSQL database service for app development.
1,643 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
asked 2024-10-17T15:53:55.1966667+00:00
HAO XIN 0 Reputation points
commented 2024-10-17T18:55:34.0166667+00:00
HAO XIN 0 Reputation points
2 answers

Is Git available for powerapps gcc?

I have been searching high and low for documentation on connecting git to a GCC account. I wanted to know it was even possible to do?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,904 questions
asked 2023-03-14T20:05:05.94+00:00
Rb 0 Reputation points
answered 2024-10-17T15:46:03.73+00:00
Jack 0 Reputation points
1 answer

Creating a custom role at the resource group level to prevent network changes

I am trying to create a custom role at the resource group, this role should deny access if a user tries to change network settings on any azure resource within the resource group. ITs currently not working as users are still able to create a private…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
asked 2024-10-16T16:19:12.3866667+00:00
MrFlinstone 581 Reputation points
commented 2024-10-16T21:41:26.3833333+00:00
MrFlinstone 581 Reputation points
1 answer

Who can share files to people outside your organization

a member of the teams site is not allowed to share a document with a person outside the org. Iam the site owner and can share. Only owners can do that?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
asked 2024-10-16T13:48:12.86+00:00
Kopsco, Joan 0 Reputation points
answered 2024-10-16T21:07:53.4633333+00:00
James Hamil 24,841 Reputation points Microsoft Employee
1 answer

Possible to create a policy that will automatically assign user/group RBAC roles based on tags

Is it possible to create a policy that will automatically assigned users/groups to RBAC roles for an RG based on the tags? If so, can you reference a template for this?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
898 questions
asked 2021-09-28T14:48:24.733+00:00
darksaber 6 Reputation points
commented 2024-10-15T17:33:29.79+00:00
Jostyn Delgado Segura 0 Reputation points
1 answer

Is it safe to add the global "Microsoft Azure App Service" to Key Vault Role Assignments

Unfortunately, it seems that KeyVault Certificates are currently still in an unstable state where RBAC is not properly implemented. Further details of the specifics and a solution to the problem can be seen here…

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,293 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,807 questions
asked 2024-09-25T12:45:50.4366667+00:00
Robbie Dyer 0 Reputation points
commented 2024-10-14T12:44:18.9166667+00:00
Akhilesh Vallamkonda 9,840 Reputation points Microsoft Vendor
1 answer

Is role inheritance applied to resources in the Resource Group?

Hello, I have a regarding role inheritance that I would like to get your help. Is role inheritance applied to resources in the the resource group? Thanks, Dun

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
asked 2024-10-01T17:34:31.62+00:00
Tran, Minh 20 Reputation points
commented 2024-10-14T09:40:21.6666667+00:00
Navya 11,225 Reputation points Microsoft Vendor
1 answer

Az CLI command for Role Assignment create for a AD group which should valid for 4hours

Hi Ref:https://learn.microsoft.com/en-us/cli/azure/role/assignment?view=azure-cli-latest#code-try-5 i have privileged access PIM to create the role assignment using the below command sh 'az role assignment create --assignee-object-id <obj_id>…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
asked 2024-10-07T16:45:35.25+00:00
Battu, Srikanth 0 Reputation points
commented 2024-10-10T11:27:25.1666667+00:00
Navya 11,225 Reputation points Microsoft Vendor
1 answer One of the answers was accepted by the question author.

AADSTS50011 Error when referencing Azure Active Directory Powershell

I'm attempting to set up a controlled-access computer such that users can only access the machine if they are in a corresponding Security Group. The code I've been advised to run for this setup is below. When I run it, I get an AADSTS50011 error when I…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
7,807 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,904 questions
asked 2024-10-03T21:07:10.5166667+00:00
Daniel Seitz (DXC Technology Services LLC) 20 Reputation points Microsoft Vendor
accepted 2024-10-09T16:35:00.19+00:00
Daniel Seitz (DXC Technology Services LLC) 20 Reputation points Microsoft Vendor
2 answers

not able to change access configuration policy

CODE InsufficientPermissions MESSAGE RAW ERROR Caller is not allowed to change permission model. For more information on how to change the permissions model follow this link: https://go.microsoft.com/fwlink/?linkid=2155160. Details:…

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,293 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
asked 2023-10-19T05:18:01.9833333+00:00
himani ghildiyal 10 Reputation points
commented 2024-10-08T08:52:37.5133333+00:00
steeve thomar 1 Reputation point
1 answer

Impossible operate on my Azure Free account

Hi all, after deleted erroneously some role from my user, I'm no longer able to operate with my subscription/account. I deleted some role from my user and now it seems be blocked. I'm not able to add permission/role again. It's a deadlock. I'm trying to…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
asked 2024-09-21T09:51:27.3333333+00:00
sb 0 Reputation points
commented 2024-10-07T23:16:38.1333333+00:00
sb 0 Reputation points
2 answers

I am uanble to upgrade my account because my billing access was changed automatically by Azure

Recently my account was disabled. I would like to find out how to enable it and upgrade it. Its not letting me upgrade.

Azure Cost Management
Azure Cost Management
A Microsoft offering that enables tracking of cloud usage and expenditures for Azure and other cloud providers.
2,616 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
898 questions
asked 2021-02-15T16:56:56.39+00:00
odsbyz 6 Reputation points
answered 2024-10-07T22:08:27.7633333+00:00
David Osaretin Urhoghide 0 Reputation points
3 answers One of the answers was accepted by the question author.

Application gateway listener error when trying to use key vault certificate using managed identity and RBAC

Hi, I'm trying to setup a listener in application gateway to use a certificate from keyvault using managed identity. But every time whne I choose in portal the managed identity and then select the key vault from the dropdown menu I get this error: …

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,293 questions
Azure Application Gateway
Azure Application Gateway
An Azure service that provides a platform-managed, scalable, and highly available application delivery controller as a service.
1,076 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,904 questions
asked 2021-10-08T06:19:49.1+00:00
Martin Cangar 31 Reputation points
commented 2024-10-07T20:20:03.8566667+00:00
Dhruvil Upadhyay 0 Reputation points
1 answer One of the answers was accepted by the question author.

In Microsoft Defender for cloud I’m trying to enter an email but it gives me privilege error and I am Global Admin

Hi Team In Microsoft Defender for cloud I’m trying to enter an additional email addresses but it gives me privilege error and I am Global Admin Regards

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
898 questions
Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,392 questions
asked 2024-10-04T07:56:59.46+00:00
Sánchez, Alberto 40 Reputation points
accepted 2024-10-04T11:05:25.8133333+00:00
Sánchez, Alberto 40 Reputation points
1 answer

Unable to add non-Global Admin account to sign in to a Windows PC

I am helping a small company who signed up for Microsoft 365 to use Office applications. The domain mydomain.com has been created at Microsoft 365 and Exchange is running fine. Users are using their Microsoft 365 accounts to log in to office.com to…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,904 questions
asked 2024-09-27T07:54:38.1566667+00:00
K. Kong 126 Reputation points
commented 2024-10-04T07:38:13.52+00:00
Clément BETACORNE 2,266 Reputation points
3 answers One of the answers was accepted by the question author.

Unable to set 'server parameters' in Postgres SQL Flexible Server on Azure

HI All, I'm trying to set a dynamic parameter, require_secure_transport parameter on Azure Database for PostgreSQL flexible server. I've got contributor rights but getting the following error. The client 'xxx@xxx.xxx' with object id 'xxx' does not have…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
Azure Database for PostgreSQL
asked 2024-09-24T02:18:19.9+00:00
Danny Chuah 40 Reputation points
accepted 2024-10-03T11:39:11.2833333+00:00
Danny Chuah 40 Reputation points
1 answer One of the answers was accepted by the question author.

Can the role "Authentication Administrator" configure passwordless authentication?

With the task: "You need to configure passwordless authentication. The solution must follow the principle of least privilege." Which role should be assigned to complete the task? I would say Authentication administrator, but the…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
814 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,904 questions
asked 2024-09-26T07:55:02.7866667+00:00
Lasse Vad 25 Reputation points
accepted 2024-10-01T07:36:46.3833333+00:00
Lasse Vad 25 Reputation points