Contributor Access On Resource Guard

Question

Request on contributor access on resource guard for a short period of time.

Answer 1

Hi @Lotanna Obianefo

To request contributor access on a Resource Guard for a short period of time, the Security admin must first create an eligible assignment for the Contributor role. After that, the Backup admin can activate the role assignment to perform protected actions.

Once the Backup admin raises a request for activating the Contributor role, the Security admin must review and approve the request. It is important to note that if the approver setup isn't configured, requests may be automatically approved without review.

After approval, the Backup admin can perform the protected operations for the requested period. If the access was assigned using a Just-In-Time (JIT) mechanism, the Contributor role will be retracted at the end of the approved period.

Reference:

https://learn.microsoft.com/en-us/azure/backup/multi-user-authorization?tabs=azure-portal&pivots=vaults-recovery-services-vault#authorize-critical-protected-operations-using-microsoft-entra-privileged-identity-management

https://learn.microsoft.com/en-us/azure/backup/multi-user-authorization-concept?tabs=recovery-services-vault

Let me know if you're facing any challenges while doing so, I can help you on this request

If you found the answer helpful, please consider upvoting it. Let me know if the issue is resolved. If you encountered any issues or need further clarification, please feel free to let us know, as we are always here to help whenever you need us.