Need help giving one user access to the function menu, inside Function App

Question

Need help giving one user access to the function menu, inside Function App

A1-IT-PC 0

My issue is that I am trying to give one user access to see and create function, inside Function App. I am not sure what kind of permission is needed for that. I gave the user the Contributor's and still the user cant see the function item in the menu:

User's image

This is what I am trying to get the user to see:

User's image

Thank you in advance.

PC

B santhiswaroop naik 405 Reputation points

2023-07-19T16:07:04.9733333+00:00
To grant a user access to view and create functions within a Function App in Azure, you need to ensure that the user has the appropriate permissions at both the Function App level and the Function level. Here's how you can do that:

Function App Level:

Navigate to the Azure portal (https://portal.azure.com) and open the Function App that you want to grant access to.

Click on "Access control (IAM)" in the left-hand menu.

Click on the "+ Add" button to add a new role assignment.

In the "Add role assignment" pane, select the "Contributor" role from the dropdown.

In the "Assign access to" section, choose "User, group, or service principal."

Search for and select the user you want to grant access to.

Click "Save" to apply the role assignment.

The user should now have Contributor permissions at the Function App level.

Function Level:

Contributor access at the Function App level grants the user permissions to manage the Function App itself. However, it might not provide access to manage individual functions within the app.

Go to the "Functions" section within the Function App in the Azure portal.

Click on the ellipsis (three dots) next to the function that the user should have access to.

Select "Manage access."

In the "Manage access" pane, click on the "+ Add" button to add a new role assignment.

Repeat the steps from the Function App Level to assign the "Contributor" role to the same user at the Function level.

Click "Save" to apply the role assignment.

After adding the role assignments, the user should be able to see the Function item in the menu and have permission to view and create functions within the Function App.

Keep in mind that it might take a few moments for the permissions to propagate and become fully active. If the user still cannot see the Function item or create functions, verify that the role assignments were set up correctly and confirm that there are no custom RBAC (Role-Based Access Control) settings that might be affecting the user's access. If issues persist, consider checking Azure's diagnostic logs and auditing for any related events that might provide additional insights.

Hope this information helps.

Please don’t forget to Accept Answer and Yes for "was this answer helpful" wherever the information provided helps you, this can be beneficial to other community members.
A1-IT-PC 0 Reputation points

2023-07-19T18:50:02.23+00:00

Thank you. I did the first part but I cannot see the Manage access on the function level. There is another thing, I would like that the user could see all functions current and new ones, in the future. This is what I see when I follow your instructions:
VenkateshDodda-MSFT 24,951 Reputation points Microsoft Employee Moderator

2023-07-24T10:14:44.1366667+00:00

Hello @A1-IT-PC ,

Following up to see if you have a chance to check my previous response and helped. Do let us know if you have any further questions on this.

1 answer

Your answer

A1-IT-PC 0 Reputation points

2023-07-19T18:50:02.23+00:00

Thank you. I did the first part but I cannot see the Manage access on the function level. There is another thing, I would like that the user could see all functions current and new ones, in the future. This is what I see when I follow your instructions:
VenkateshDodda-MSFT 24,951 Reputation points Microsoft Employee Moderator

2023-07-24T10:14:44.1366667+00:00

Hello @A1-IT-PC ,

Following up to see if you have a chance to check my previous response and helped. Do let us know if you have any further questions on this.

Answer 1

@A1-IT-PC Thank you for reaching out to Microsoft Q&A, apologize for any inconvenience caused on this.

To test this behavior, we have created a sample user in our subscription and given contributor access at function app level only. Post that when we tried to log-in to portal with that user credentials, we are able to see the function app, enable and disable the functions inside the function app without any issues.

In your earlier response you have mentioned that you have assigned the user with contributor access and still user is not able to access/see the functions at which scope (either at function App level or resource group level or at subscription level) you have given contributor role?

Once a particular role is assigned to user it will take some time to propagate the access to the user. Can you ask the specific user to try signing-out and sign-in again and check.

Also, could you please ask the user to run this cmdlet in your local PowerShell or in cloud shell Get-AzRoleAssignment -ObjectId "<UserObjectId>" to see what permissions has been assigned to him.

If you are still facing the issue, please send an email with subject line “Attn:Venkatesh|thread title” to AzCommunity@microsoft.com referencing this thread with the above cmdlet output as well, I will follow-up with you.

Share via

Need help giving one user access to the function menu, inside Function App

1 answer

Your answer