@Girish Prajwal Here are the steps to make sure all the users have read access to Azure Load Balancer.
1) Create the Dynamic Group by following the steps mentioned this document so that it includes all the users of type Member and Guest of Azure Active Directory.
2) Create a Custom Role which has contain read access permissions to the Azure Load Balancer by following the steps mentioned in this document.
3) Assign the Custom Role to the Dynamic Group so that the permissions will be applied to all the users. For more information, refer this document.
Kindly try above steps and revert if you have further questions.
@Girish Prajwal Thanks for your comment. I am looking into it and will update you soon.
@Girish Prajwal Please note Azure Policy helps to enforce organizational standards and to assess compliance at-scale. Azure Policy evaluates resources in Azure by comparing the properties of those resources to business rules. It means Azure Policy uses the ARM properties of azure resources. Based on the ARM properties, the aliases are created (most of them are available, this is applicable if only any alias isn't available )and then used to assess the compliance of resources.
For Azure Load balancer, to retrieve the list of available aliases the below PowerShell command can be used
For your requirement, I presume Dynamic Groups feature from Azure Active Directory will be applicable. I will test it from my end and provide you a solution.
Any Testing Done with Dynamic Groups feature.
Sign in to comment