Role to explore in Azure MySQL Flexible server.

Question

Role to explore in Azure MySQL Flexible server.

Morsi 30

Hi,

I have created an Azure web app as well as a flexible MySQL server database in the same resource group.

I want to grant access to my developer for this resource group so they can work on both the web app and the MySQL database.

I added the "Website Contributor" role to the resource group, which allowed my developer to see the web app and the app service plan, but not the MySQL database.

When adding the role, I couldn't find any role specifically for managing the MySQL database to assign to my developer.

I tried to assign the "SQL Managed Instance Contributor" role to them, but it didn't work, meaning the developer still cannot see the MySQL resource.

What role should I assign to them to enable them to view the flexible MySQL server database?

Thanks for help.

GeethaThatipatri-MSFT 29,552 Reputation points Microsoft Employee Moderator

2023-09-13T13:34:08.2966667+00:00

Hi @Morsi Thanks for posting your question in the Microsoft Q&A forum.

To grant your developer access to the flexible MySQL server database, you can assign the "Contributor" role to at the database level. The "Contributor" role has permission to create and manage all resources, including the flexible MySQL server database

Regards

Geetha
Morsi 30 Reputation points

2023-09-13T14:34:09.3766667+00:00

thank you for your help @GeethaThatipatri-MSFT

I tried to assign the "SQL Managed Instance Contributor" role to my developper on the ressource group, but it didn't work, meaning the developer still cannot see the MySQL resource.

Is this the role you are referring to?
Morsi 30 Reputation points

2023-09-14T14:16:29.64+00:00

I'll come back to you, I added the "contributor" role to the MySQL database from the IAM part of the MySQL database and not from the resource group.

On the other hand, Azure advises me "Can a job function role with less access be used instead?" how can I replace the contributor role with a job function role?
GeethaThatipatri-MSFT 29,552 Reputation points Microsoft Employee Moderator

2023-10-03T15:57:03.02+00:00

Hi, @Morsi We haven't heard back from you. Please let us know if your issue is resolved.

Regards

Geetha

1 answer

Your answer

GeethaThatipatri-MSFT 29,552 Reputation points Microsoft Employee Moderator

2023-09-13T13:34:08.2966667+00:00

Hi @Morsi Thanks for posting your question in the Microsoft Q&A forum.

To grant your developer access to the flexible MySQL server database, you can assign the "Contributor" role to at the database level. The "Contributor" role has permission to create and manage all resources, including the flexible MySQL server database

Regards

Geetha
Morsi 30 Reputation points

2023-09-13T14:34:09.3766667+00:00

thank you for your help @GeethaThatipatri-MSFT

I tried to assign the "SQL Managed Instance Contributor" role to my developper on the ressource group, but it didn't work, meaning the developer still cannot see the MySQL resource.

Is this the role you are referring to?
Morsi 30 Reputation points

2023-09-14T14:16:29.64+00:00

I'll come back to you, I added the "contributor" role to the MySQL database from the IAM part of the MySQL database and not from the resource group.

On the other hand, Azure advises me "Can a job function role with less access be used instead?" how can I replace the contributor role with a job function role?
GeethaThatipatri-MSFT 29,552 Reputation points Microsoft Employee Moderator

2023-10-03T15:57:03.02+00:00

Hi, @Morsi We haven't heard back from you. Please let us know if your issue is resolved.

Regards

Geetha

Answer 1

GeethaThatipatri-MSFT 29,552 Microsoft Employee Moderator

Thanks, @Morsi for the additional information and screenshot, We don’t have any built-in RBAC role for MySQL. You should have to create a custom role and add the necessary permission for the operation you would like to allow. Azure resource provider operations | Microsoft Learn

Please let me know if you need any other information.

Regards

Geetha

Share via

Role to explore in Azure MySQL Flexible server.

1 answer

Your answer