Azure App Service - Custom Domain and SSL Binding

Question

Hello,

We have an Azure Web App Service, where we create custom domains. I was recently given access to the "Contributor" role for this web app. I am able to create and verify custom domains successfully. However, the SSL binding is failing due to an error stating that I am not authorized to do this.

I have tried the following steps, but found no luck:

1. Refreshed my credentials by logging out and log in back in, tried it in a different browser
2. Checked with the Azure Admin and confirmed I have the Contributor role access
3. The Contributor role does have the Certificate Write permission
   
4. I am using the below setting while binding the SSL.
   

Any help related to this issue would be greatly appreciated. Thanks in advance.

Answer 1

@Anirudh Srinivas Changes to the SSL certificates of a site are viewed as a high impact and thus the only default role that is allowed to make changes is the owner role.

Can you please go back to the web app owner and see if they will create a custom role for you that contain the following custom attributes for you to make changes to the SSL certificate(s) of the Azure Web App?

• Microsoft.Web/certificates/write
• Microsoft.Web/certificates/delete
• Microsoft.Web/sites/config/sslcertificates/write
• Microsoft.Web/sites/config/sslcertificates/delete