az acr connected-registry permissions

Manage the repository permissions accross multiple connected registries. Please see https://aka.ms/acr/connected-registry for more information.

Commands

az acr connected-registry permissions show

Show the connected registry sync scope map information.

az acr connected-registry permissions update

Add and remove repository permissions accross all the necessary connected registry sync scope maps.

az acr connected-registry permissions show

Show the connected registry sync scope map information.

az acr connected-registry permissions show --name
                                           --registry
                                           [--resource-group]

Examples

Show details and attributes of a sync scope map for a connected registry.

az acr connected-registry permissions show -r mycloudregistry -n myconnectedregistry

Required Parameters

--name -n

Name for the connected registry. Name must be between 5 to 40 character long, start with a letter and contain only alphanumeric characters (including ‘_’ or ‘-’). Name must be unique under the Cloud ACR hierarchy.

--registry -r

The login server of the Cloud ACR registry. Must be the FQDN to support also Azure Stack.

Optional Parameters

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

az acr connected-registry permissions update

Add and remove repository permissions accross all the necessary connected registry sync scope maps.

az acr connected-registry permissions update --name
                                             --registry
                                             [--add]
                                             [--remove]
                                             [--resource-group]

Examples

Add permissions to synchronize images from 'repo1' and 'repo2' to the connected registry 'myconnectedregistry' and its ancestors.

az acr connected-registry permissions update -r mycloudregistry -n myconnectedregistry --add repo1 repo2

Remove permissions to synchronize images from 'repo1' and 'repo2' to the connected registry 'myconnectedregistry' and its descendants.

az acr connected-registry permissions update -r mycloudregistry -n myconnectedregistry --remove repo1 repo2

Remove permissions to synchronize 'repo1' images and adds permissions for 'repo2' images.

az acr connected-registry permissions update -r mycloudregistry -n myconnectedregistry --remove repo1 --add repo2

Required Parameters

--name -n

Name for the connected registry. Name must be between 5 to 40 character long, start with a letter and contain only alphanumeric characters (including ‘_’ or ‘-’). Name must be unique under the Cloud ACR hierarchy.

--registry -r

The login server of the Cloud ACR registry. Must be the FQDN to support also Azure Stack.

Optional Parameters

--add

Repository permissions to be added to the targeted connected registry and it's ancestors sync scope maps. Use the format "--add [REPO1 REPO2 ...]" per flag. Valid actions are {'content/write', 'content/read', 'metadata/write', 'metadata/read', 'content/delete'}.

--remove

Repository permissions to be removed from the targeted connected registry and it's succesors sync scope maps. Use the format "--remove [REPO1 REPO2 ...]" per flag. Valid actions are {'content/write', 'content/read', 'metadata/write', 'metadata/read', 'content/delete'}.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.