question

GlennMaxwell-2309 avatar image
0 Votes"
GlennMaxwell-2309 asked GlennMaxwell-2309 commented

Reader Access

Hi All

I am using Windows virtual desktop classic edition and Azure Virtual Desktop. i want to give reader access to an AD group where i want to give read access to the users of this AD to Windows Virtual Desktop and Azure Virtual Desktop. i.e i want users of this AD group fetch session hostnames. are the below syntaxes correct

WVD
New-RdsRoleAssignment -RoleDefinitionName "RDS Reader" -GroupObjectId "aaaa-aaaa-aaaa-aaaa-aaaa" -TenantGroupName "contosoTenantGroup" -TenantName "contosoA"

AVD
New-AzRoleAssignment -RoleDefinitionName "RDS Reader" -GroupObjectId "aaaa-aaaa-aaaa-aaaa-aaaa" -TenantGroupName "contosoTenantGroup" -TenantName "contosoA"

azure-virtual-desktop
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

srbhatta-msft avatar image
0 Votes"
srbhatta-msft answered GlennMaxwell-2309 commented

Hello @GlennMaxwell-2309 , thanks for reaching out to Microsoft QnA.
The first Powershell command for WVD seems correct to me. However, when I tried the second command in my lab for AVD, I got an error. I am checking on how the correct syntax in order to remove the error. Did you by any chance try running any of the above commands?

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

first command is correct even it succeeded for me, second one is not working. may be something else it should be but i am not sure.

az role assignment create --assignee -GroupObjectId "aaaa-aaaa-aaaa-aaaa-aaaa" --role "Reader" -TenantGroupName "contosoTenantGroup" -TenantName "contosoA"

0 Votes 0 ·
srbhatta-msft avatar image srbhatta-msft GlennMaxwell-2309 ·

New-AzRoleAssignment -ObjectId <groupobjectid> -RoleDefinitionName "Desktop Virtualization Reader" -ResourceName <resourcename> -ResourceGroupName <rgname> -ResourceType 'Microsoft.DesktopVirtualization/hostpools'

Try mentioning the name of the hostpool under resource name, and let me know if this works.

0 Votes 0 ·

i am unable to mark as answer

0 Votes 0 ·
srbhatta-msft avatar image srbhatta-msft GlennMaxwell-2309 ·

Hello @GlennMaxwell-2309 , could you please check and accept as answer now? Thanks! :)

0 Votes 0 ·