question

DanVasilov-9773 avatar image
0 Votes"
DanVasilov-9773 asked ryanchill edited

Is it possible to restrict access to "Get publish profile" functionality?

Is it possible, in Azure, to only allow specific people to execute the operation "Get publish profile" for an app service? The restriction should be active regardless of the method a person would try to use to obtain a publish profile, such as clicking the "Get publish profile" button in the Azure portal, or using Visual Studio, or using the PowerShell GetPublishProfile cmdlet.

azure-rbac
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

ryanchill avatar image
0 Votes"
ryanchill answered

There isn't a built-in role like WebSite Contributor that you can set. But you can either allow or deny Microsoft.Web/sites/publishxml/Action to a custom role, which is the preferred method and the assign the role to the designated users.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.