985 questions with Azure Role-based access control tags

Sort by: Updated
Updated Created Answers
0 answers

How to fix this issue unexpected status 400 with error: BadRequest: Operation failed. Managed identity used in CMK not found.

Hi All, I try to push changes to Azure portal, but from yesterday I have above error always when I try using UAMI. Both UAMI which I used are created on an Azure portal with correct keys and policies. Kind regards, Anna

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,456 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2023-12-19T07:10:27.51+00:00
Chemicz, Anna 0 Reputation points
edited the question 2023-12-29T02:48:27.97+00:00
Givary-MSFT 35,626 Reputation points Microsoft Employee Moderator
1 answer One of the answers was accepted by the question author.

failed in creating logic app tiggers for filesystem

Failed to create connection :{"error":{"code":"AuthorizationFailed" does not have authorization to perform action "Microsoft.Web/connections/write' over scope…

Azure Storage
Azure Storage
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
3,545 questions
Azure Logic Apps
Azure Logic Apps
An Azure service that automates the access and use of data across clouds without writing code.
3,566 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,021 questions
Microsoft Security | Microsoft Entra | Other
asked 2023-12-21T18:16:45.1533333+00:00
A Stelena 20 Reputation points
commented 2023-12-22T06:51:50.9466667+00:00
A Stelena 20 Reputation points
1 answer One of the answers was accepted by the question author.

Access Review history

The Access Review history only appears to go back a maximum of one month. This is not very useful if being used to track access over a period of time. Is there any way around this?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2023-12-20T13:13:48.11+00:00
Conor Deegan | CloudAssist 21 Reputation points
commented 2023-12-20T14:45:59.2766667+00:00
Conor Deegan | CloudAssist 21 Reputation points
2 answers One of the answers was accepted by the question author.

I need only users access in my azure dashboard. which role to assign for that?

Hello Support team, Im facing an issue where, Instead of adding global administrator role to my guest account, I need access only to user management and approval in my azure dashoard, how it is possible? Your prompt assistance is highly appreciated.…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
asked 2023-12-13T14:04:41.2633333+00:00
Tarun Sharma 20 Reputation points
accepted 2023-12-19T08:04:51.61+00:00
Tarun Sharma 20 Reputation points
1 answer

Add ACL to AzureFiles via a VM on the same RG

Hi guys. I built out an RG with a test vm in it and hosted Azure Files there. I've created 3 file shares and are able to mount them on my work computer via VPN and with my user credentials, not shared access key. We are wanting to build out the access…

Azure Files
Azure Files
An Azure service that offers file shares in the cloud.
1,425 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
asked 2023-12-06T19:28:52.0533333+00:00
Johnny 0 Reputation points
commented 2023-12-13T12:30:59.7733333+00:00
Anand Prakash Yadav 7,860 Reputation points Microsoft External Staff
1 answer One of the answers was accepted by the question author.

How to set permissions at repository level

Is it possible to set the visibility of different users at repo level. For Example. If there are 2 teams i.e., team1 and team2, in a project i.e., Action having 3 repos i.e, R1, R2, R3. I want team1 to have visibility of only R1 and R2. and team2 having…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
asked 2023-11-30T07:36:52.84+00:00
Tisha Sinha 20 Reputation points
commented 2023-12-08T04:55:48.4733333+00:00
Tisha Sinha 20 Reputation points
1 answer One of the answers was accepted by the question author.

Access denied to subscription as the owner

Why is my access denied as the Owner of this subscription?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
asked 2023-12-03T13:53:57.1733333+00:00
Brett Larson 25 Reputation points
accepted 2023-12-08T00:09:14.78+00:00
Brett Larson 25 Reputation points
1 answer

Scoped PIM assignment (schedules) do not show up in API

Active assignments of certain directory roles (for example "Application Administrator") that are limited to the scope of a service principal or application do not show up in /rolemanagement/directory/roleAssignmentScheduleRequests or…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Entra | Other
asked 2023-01-25T14:56:08.64+00:00
Stefan Boerner 0 Reputation points
edited a comment 2023-12-07T21:57:24.3533333+00:00
DWolff 0 Reputation points
1 answer

How can I use REST API to retrieve role assignment details, including the name of users and service principals from Microsoft purview account?

So, I'm trying to get the role assignments from Microsoft purview using the following REST API: api_endpoint = f"https://{pv_account_name}.purview.azure.com/policystore/metadataroles" With this I am able to obtain the ids, and role name but I…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
Microsoft Security | Microsoft Purview
asked 2023-11-14T11:35:08.57+00:00
Brishti Basu 0 Reputation points
commented 2023-12-07T06:55:16.8933333+00:00
PRADEEPCHEEKATLA 90,736 Reputation points Moderator
1 answer

How to Protection conditional based access for azure portal, to allow to access only for fixed IPs

How to Protection conditional based access for azure portal, to allow to access only for fixed IPs

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
Microsoft Security | Intune | Security
asked 2023-11-27T12:33:06.8033333+00:00
sandeep.gupta 0 Reputation points
commented 2023-12-06T03:52:22.8733333+00:00
Sandeep G-MSFT 20,926 Reputation points Microsoft Employee Moderator
1 answer

AIM access custom granular role assigments

I am trying to create a custom RBAC role to allow users to fully manage the creation of containers, Kubernetes, terraform, service principal and so on in Azure subscription. I tried a few things from the permissions but I cannot get it going :-( Also,…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
asked 2023-11-24T17:00:48.5133333+00:00
Razzi29 336 Reputation points
commented 2023-12-05T20:28:11.6333333+00:00
JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator
1 answer

Create Custom Role | No Access?

I would like to try to create some custom roles. Unfortunately, despite being a Global Administrator, when I go to the screen to create custom roles I get an error: { "shellProps": { "sessionId":…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
asked 2023-04-27T16:03:54.77+00:00
Ryan Williams 5 Reputation points
commented 2023-11-27T22:07:06.04+00:00
TP 126.7K Reputation points Volunteer Moderator
0 answers

Establish federated identity credential / required RBAC role

Which Azure RBAC role is required to establish federated identity credential? https://learn.microsoft.com/en-us/azure/aks/learn/tutorial-kubernetes-workload-identity#establish-federated-identity-credential Following the error message this action is…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
Microsoft Security | Active Directory Federation Services
asked 2023-06-26T14:01:06.07+00:00
Anonymous
commented 2023-11-27T06:57:11.82+00:00
Rinesh Varghese Kappil 0 Reputation points
1 answer One of the answers was accepted by the question author.

Can I allow only domain joined PCs to access Azure Portal ?

Can I allow only domain joined PCs to access Azure Portal ?

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
Microsoft Security | Microsoft Entra | Other
asked 2023-11-26T05:51:28.84+00:00
Basem Halfawy 40 Reputation points
edited the question 2023-11-27T02:51:22.8633333+00:00
AjayBathini-MSFT 40 Reputation points Microsoft External Staff
1 answer One of the answers was accepted by the question author.

How can I resolve the 'Cannot find user or service principal in graph database' error when assigning a role in Azure Digital Twins using a Microsoft account email?

I'm attempting to do the Digital Twins hands-on lab from GitHub (https://github.com/Azure-Samples/digital-twins-samples/tree/main/HandsOnLab), and I need to assign the Azure Digital Twins Data Owner permission using the following code: plaintextCopy…

Azure Digital Twins
Azure Digital Twins
An Azure platform that is used to create digital representations of real-world things, places, business processes, and people.
238 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
Microsoft 365 and Office | Access | For business | Windows
asked 2023-11-24T08:16:51.2633333+00:00
hwajeong lee 30 Reputation points
commented 2023-11-25T09:46:02.41+00:00
hwajeong lee 30 Reputation points
2 answers

Global reader vs Global admin

Hello, I am attempting to assist a user in our organization that needs to be able to see the last sign in time for users in the org. This is shown nicely on the allusers blade by adding the column “last sign in time” to the blade view. However, this…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
asked 2023-11-17T17:25:57.38+00:00
Fuzie, Brett 0 Reputation points
commented 2023-11-24T05:08:38.0233333+00:00
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,526 Reputation points Moderator
2 answers

Assign RBAC across subscriptions

Hi, I have 2 subscriptions in same tenant, one of them has cosmos DB and another one has azure function. I need to assign cosmos read RBAC access to function so that my function can read values from cosmos. I have done similar role assignment using bicep…

Azure Functions
Azure Functions
An Azure service that provides an event-driven serverless compute platform.
5,950 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
asked 2023-11-06T04:18:31.15+00:00
Vikas Tiwari 771 Reputation points
edited the question 2023-11-22T16:10:37.0266667+00:00
GeethaThatipatri-MSFT 29,557 Reputation points Microsoft Employee Moderator
1 answer

Get RoleAssignments from Graph for GCCH Azure tenant fails on Searches against this resource are not supported

Hi, I'm trying to run this query on a GCCH Azure tenants: https://graph.microsoft.com/beta/RoleManagement/Directory/RoleAssignments and fail on 'Searches against this resource are not supported. Only specific instances can be queried.' Only when I add…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Graph
asked 2023-11-05T22:06:03.8433333+00:00
Idan Greenberg 0 Reputation points
commented 2023-11-20T22:09:55.59+00:00
Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator
1 answer

transfer account access after death of account holder

Our employee/colleague died and we need his access transferred to maintain AZURE service

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
asked 2023-11-02T21:50:02.5466667+00:00
Joseph Muennich 0 Reputation points
commented 2023-11-16T12:05:50.2533333+00:00
Sandeep G-MSFT 20,926 Reputation points Microsoft Employee Moderator
2 answers

Let a user view and modify only on container in a storage account

I want the user to see only one container and hide others in a storage account. The problem, that I can give Read access on the storage account level which means that the user will see all containers, and if I give access on the Container level the user…

Azure Blob Storage
Azure Blob Storage
An Azure service that stores unstructured data in the cloud as blobs.
3,204 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
985 questions
Microsoft Security | Microsoft Entra | Microsoft Entra ID
asked 2023-11-05T15:08:52.77+00:00
Quitrie LAGRANDE 0 Reputation points
commented 2023-11-15T03:30:02.3433333+00:00
Siva Villa 285 Reputation points Microsoft Employee Moderator