Using Windows Admin Center to manage Azure services and OnPremise Windows Servers?

Question

I have successfully installed the Windows Admin Center https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/deploy/install

and now I am faced with this setup question:

Do I need to deploy something or a VM appliance gateway in Azure to allow me securely manage Azure IaaS components from my laptop?

My goal here is to allow not just my own laptop or login to manage the Azure and the OnPremise servers & clusters, but specific AD group members only.

Answer 1

You need to provision an Azure App in order to allow WAC to interact with Azure resources. The Azure App in this case will be your bridge between Azure and WAC. You have to configure the gateway only the first time and then your other colleagues will re-use the existing gateway you configured

The registration steps are here: https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/azure-integration#register-your-gateway-with-azure

For governance/permissions you have the different roles you can assign here: https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/configure/user-access-control#gateway-access-role-definitions