886 questions with Azure Role-based access control tags

Sort by: Updated
Updated Created Answers
0 answers

Urgent Issue with Role Assignment in Azure – "MissingSubscription" Error

  Issue: Unable to Assign Role to ACR - MissingSubscription Error Problem Description: I encountered an issue while trying to assign the AcrPull role to a service principal for my Azure Container Registry (ACR). Every time I run the following command: az…

Azure Container Registry
Azure Container Registry
An Azure service that provides a registry of Docker and Open Container Initiative images.
486 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
asked 2025-03-03T20:04:06.93+00:00
nehad shmale 0 Reputation points
edited a comment 2025-03-07T12:47:15.96+00:00
Pramidha Yathipathi 0 Reputation points Microsoft External Staff
1 answer

Azure resource sharing among multiple users

I have created few resources under Startup Subscription, however even after trying many times and many options, I am unable to add another user to see these resources and use them (e.g. DB Creation, App deployment etc.). Can you please suggest the steps…

Azure SQL Database
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
8,433 questions
asked 2025-03-01T05:12:06.6566667+00:00
TrackSeal 0 Reputation points
commented 2025-03-06T07:17:39.7466667+00:00
TP 108.6K Reputation points
1 answer

Unusual Activity Detected: Full Deny Assignment for User

A full deny assignment was detected on ********* for user ******** at the root level. The deny assignment was added at the scope / for user ***********. What could be the implications of this unusual activity? Though i have marked my account ( service…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
asked 2025-03-03T20:46:48.22+00:00
Aid 0 Reputation points
commented 2025-03-06T00:14:34.2666667+00:00
Sanoop M 1,245 Reputation points Microsoft External Staff
0 answers

Unable to Update Azure Role for a Subscription although i have Owner and User Access Admin rights at that Subscription

Unable to Update Azure Role for a Subscription although i have Owner and User Access Admin rights at that Subscription, It gives error The requestor XXX does not have permissions for this request. Please use $filter=asTarget() to filter on the…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
asked 2024-09-03T15:18:49.74+00:00
Navneet Kapoor 5 Reputation points
commented 2025-03-03T11:58:13.54+00:00
Gagandeep Tangri 0 Reputation points
2 answers One of the answers was accepted by the question author.

Difference between Global Admin and Owner in Microsoft Azure

Hi guys, So far, I know that Global Administrator is an Azure AD built-in role that manage access to all the administrative features in Azure AD and Owner is an RBAC role that has full access to all Azure resources. But what are the other differences…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,564 questions
asked 2023-06-21T23:29:14.81+00:00
Lt. Columbo 326 Reputation points
commented 2025-02-28T18:52:11.7833333+00:00
STEPHEN BLAINE JUNEAU 0 Reputation points
1 answer

How to list eligible roles in PIM assigned with a group in PIM?

How to list eligible roles in PIM assigned with a group in PIM even if the role hasn't been enabled yet. We assign privileged roles with role-assigned groups with PIM but eligible roles. if the user has enabled his roles on the "My Roles"…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
asked 2025-02-25T15:54:19.5666667+00:00
Olivier Lumeau 126 Reputation points
commented 2025-02-28T10:37:00.2266667+00:00
Janaki Kota 790 Reputation points Microsoft External Staff
2 answers

I cannot remove Resource Group and its resources due to system defined RBAC deny assignments

I have created an Automatic Azure Kubernetes Cluster with managed Prometheus monitoring and Managed Grafana instance for visualization. When I remove Resource Group in which cluster resource resides, the automatically created Resource Group with Azure…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
Azure Kubernetes Service (AKS)
Azure Kubernetes Service (AKS)
An Azure service that provides serverless Kubernetes, an integrated continuous integration and continuous delivery experience, and enterprise-grade security and governance.
2,298 questions
asked 2025-02-26T15:27:17.26+00:00
Mika Seitsonen 0 Reputation points
answered 2025-02-26T21:02:08.4433333+00:00
Nikhil Duserla 4,755 Reputation points Microsoft External Staff
1 answer One of the answers was accepted by the question author.

Is it possible to create a Redirect URI via an API call instead of using the Azure portal? Trying to automate.

I am trying to figure out if it is possible to create a Redirect URI in Azure WITHOUT going through the Azure portal? I understand how to add a Redirect URI for doing AD authentication for my application, but I would like to automate the creation of this…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
8,433 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,564 questions
asked 2021-07-14T18:30:21.86+00:00
Skylar Scaling 21 Reputation points
commented 2025-02-26T13:38:09.7033333+00:00
Anand Sowmithiran 1 Reputation point
1 answer

How to configure "Europe Access Only" for resources in Azure Subscription instead of Tenant

Our objective is to restrict access to resources within our Azure subscription to ensure that personal data remains inaccessible to operators and end-users located outside the EEA (European Economic Area) or Switzerland. Could you please share any clear…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
23,564 questions
asked 2025-01-06T05:51:31.6366667+00:00
Bai, Bob 20 Reputation points
commented 2025-02-19T10:30:47.6966667+00:00
Sakshi Devkante 1,330 Reputation points Microsoft External Staff
2 answers One of the answers was accepted by the question author.

Azure KeyVault Data Access Administrator Role can't assign KeyVault Certificate User role

The KeyVault Data Access Administrator role is meant to be used to assign permissions for other KeyVault related roles, however it appears the KeyVault Certificate User was missed and cannot be assigned by the KV Data Access Administrator role. So, at…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
asked 2025-02-14T21:48:29.9+00:00
Austin Mager 20 Reputation points Microsoft Employee
accepted 2025-02-18T18:39:55.4966667+00:00
Austin Mager 20 Reputation points Microsoft Employee
1 answer

[UnusualActivity] Full Deny assignment

I can't perform any action on my account using my student credit . I can't create nor manage any resource even though I still have unused credits and valid azure account. The client with object id '.............' has permission to perform action…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
Azure App Service
Azure App Service
Azure App Service is a service used to create and deploy scalable, mission-critical web apps.
8,433 questions
asked 2025-01-28T17:46:11.7966667+00:00
Ghassen Latrach 10 Reputation points
commented 2025-02-17T11:53:48.4933333+00:00
emnaabidi 5 Reputation points
2 answers

A resource owner is on leave, and you urgently need to assign roles to manage Azure resources.

i need to assign the role for the particular user to access the azure active directory

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
Azure Advisor
Azure Advisor
An Azure personalized recommendation engine that helps users follow best practices to optimize Azure deployments.
83 questions
asked 2025-02-06T18:59:45.4066667+00:00
Manchala Gurunadha Rao 0 Reputation points
commented 2025-02-17T08:56:31.6466667+00:00
Navya 16,050 Reputation points Microsoft External Staff
1 answer

how to get the list of SPN role assignment access

We assigned built-in roles and custom roles to the service principle, but where we are check all SPN access list? when we go to subscription and can verify the roles.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
asked 2025-02-12T18:07:00.4233333+00:00
Gangasani, Narender 0 Reputation points
commented 2025-02-17T08:36:04.1533333+00:00
Janaki Kota 790 Reputation points Microsoft External Staff
1 answer

Unable to get email alert for PIM role activation

Hello, we used to receive emails from Microsoft Azure for the PIM roles activation but It just stopped. Nothing changed just we are no longer receiving emails for role activation. Can you please help me with this? Thanks!

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
asked 2024-12-05T17:18:37.2366667+00:00
Yasin Turan 0 Reputation points
edited the question 2025-02-12T20:09:01.0933333+00:00
Peter Doering 180 Reputation points
1 answer

Need MFA reset for Tenant Admin

Hi Team, Need your help in resetting the MFA for one of the Tenant admins in Azure portal. Kindly let me know the steps to do the same.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
asked 2025-01-17T12:19:17.7833333+00:00
Srinivasan C K 0 Reputation points
edited the question 2025-02-12T19:42:23.37+00:00
Peter Doering 180 Reputation points
3 answers One of the answers was accepted by the question author.

No rights to delete a subscription

I have an old tenant from a company I shutdown a few years ago. I want to delete the tenant but there is still a subscription in the tenant and that is blocking the deletion. So, I try to cancel the subscription. I don't have rights. I am the 'Global…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
asked 2025-02-04T21:12:17.48+00:00
Allen Long 20 Reputation points
commented 2025-02-12T19:21:10.38+00:00
Allen Long 20 Reputation points
1 answer

How can I assign granular RBAC rights to Defender EASM Azure Resource

When creating a Defender EASM Resource in Azure, there is no possibility to granularly assign RBAC Roles to this resource. In the Defender EASM Portal the "IAM" Section is missing for role assignment. However in order to create the resource you…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
asked 2025-02-04T14:35:44.97+00:00
Sascha Reuter 10 Reputation points
commented 2025-02-12T13:28:13.4733333+00:00
Raja Pothuraju 15,880 Reputation points Microsoft External Staff
1 answer One of the answers was accepted by the question author.

After creating Azure compute gallery and making it public unable to find images in it via it's Community gallery name

Hi, I have created Azure compute gallery with Community sharing type, via both Azure portal and Azure cli, by following official documentation, but was unable to list VM images that I have created in it from VM in azure community images both via image…

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
8,468 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
asked 2024-09-11T12:34:02.3166667+00:00
Maksym Perehinets 25 Reputation points
accepted 2025-02-12T13:24:54.0566667+00:00
Maksym Perehinets 25 Reputation points
0 answers

Azure Function App Read-only on functions

How can I create a custom role in Azure that allows users to view Function App code in read-only mode? Currently, users with the built-in Reader role can see the Function App but get an error requiring write permissions when trying to view the actual…

Azure Functions
Azure Functions
An Azure service that provides an event-driven serverless compute platform.
5,504 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
asked 2025-01-09T19:31:20.1566667+00:00
Joey 0 Reputation points
edited the question 2025-02-11T20:10:38.6233333+00:00
Ryan Hill 29,846 Reputation points Microsoft Employee
1 answer

Access control (IAM) Issue - Creating is greyed out

I am owner of a MS Action Pack Subscription. I cannot find out why i am not able to create role assignents in Access control (IAM) anymore. I stuck in the last menu. The create button is greyed out.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
886 questions
asked 2025-02-04T11:25:21.62+00:00
Peter Drose | cloudconnex 0 Reputation points
commented 2025-02-07T09:20:15.4966667+00:00
Goutam Pratti 1,995 Reputation points Microsoft External Staff