question

sol-0835 avatar image
0 Votes"
sol-0835 asked Prrudram-MSFT answered

Is it impossible to share the gallery image between other accounts In Azure?

Account A - Gallery Image Created by Subscription A
Account B - You are about to create a vm from a resource in the b subscription.

Is this possible?

https://docs.microsoft.com/ko-kr/azure/virtual-machines/linux/share-images-across-tenants#create-a-vm-using-azure-cli
When proceeding according to the relevant manual, The client has permission to perform action 'Microsoft.Compute/galleries/images/versions/read error will occur.

Granting the b account owner's permission, gallery's reading, and owner's permission also results in a permission error.

azure-virtual-machinesazure-migrateazure-virtual-machines-images
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VidyaNarasimhan-2409 avatar image
2 Votes"
VidyaNarasimhan-2409 answered

Hi @sol-0835 , you can share gallery images with users/groups/servicePrinciples using RBAC as described here
https://docs.microsoft.com/en-us/azure/virtual-machines/share-gallery?tabs=portal

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Prrudram-MSFT avatar image
0 Votes"
Prrudram-MSFT answered

Hello @sol-0835,

Thank you for reaching out to the Microsoft Q&A platform. Happy to answer your question.

Shared Image Gallery introduces three new resources that help with managing customer images. In order of hierarchy, these are:

  1. Shared Image Gallery

  2. Image Definition

  3. Image Version

Like @VidyaNarasimhan-2409 suggested each of the three new resource types introduced with Shared Image Gallery can be shared with another user, service principal or an AD group through Role Based Access Control. Once shared, a VM or virtual machine scale sets (VMSS) can be created in any subscription within the same AD tenant as the image.

202361-image.png

How can I list all the Azure Compute Gallery resources across subscriptions?
To list all the Azure Compute Gallery resources across subscriptions that you have access to on the Azure portal, follow the steps below:

Open the Azure portal.
Scroll down the page and select All resources.
Select all the subscriptions under which you'd like to list all the resources.
Look for resources of the Azure Compute Gallery type.

Can I replicate my image versions across subscriptions?
No, you may replicate the image versions across regions in a subscription and use it in other subscriptions through RBAC.

References: https://azure.microsoft.com/en-in/blog/azure-shared-image-gallery-now-generally-available/
https://docs.microsoft.com/en-us/azure/virtual-machines/shared-image-galleries#can-i-replicate-my-image-versions-across-subscriptions

Please "Accept as Answer" and Upvote if the answer provided is useful, so that you can help others in the community looking for remediation for similar issues.







image.png (55.0 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.