Can we add application gateway public IP from 2 different subscription within same tenant as endpoint in Traffic Manager ?

Chandu VeeraBhaskar 1

1 answer

Herman Ge 26 Reputation points Microsoft Employee

2020-05-27T16:17:56.423+00:00

From following link
https://learn.microsoft.com/en-us/azure/traffic-manager/traffic-manager-faqs#can-i-use-traffic-manager-with-endpoints-from-multiple-subscriptions

Where it says：
For other endpoint types, it is possible to use Traffic Manager with endpoints from more than one subscription. In Resource Manager, endpoints from any subscription can be added to Traffic Manager, as long as the person configuring the Traffic Manager profile has read access to the endpoint. These permissions can be granted using Azure Resource Manager role-based access control (RBAC).

It seems we can make it through RBAC.
Please sign in to rate this answer.
Chandu VeeraBhaskar 1 Reputation point

2020-05-27T16:52:28.947+00:00

I have seen this in FQA's of TM but need Some more elaboration how can we access other Endpoints which resides in different subscription, region and having some security concerns not to access other Subscription via RBAC

Herman Ge 26 Reputation points Microsoft Employee

2020-05-29T09:34:40.757+00:00

I have verified that we can make it through following CLI. Details:

New-AzTrafficManagerEndpoint -EndpointStatus Enabled -Name "EndpointName" -ProfileName "TrafficManagerProfileName" -ResourceGroupName "ResourceGroupName" -Type AzureEndpoints -Priority <PriorityNumber> -TargetResourceId "<Resource ID>"

How to get Resource ID of public IP address in another subscription through PowerShell CLI?

PS /home/> Select-AzSubscription -SubscriptionName <Name>

PS /home/> Get-AzPublicIpAddress -Name <PublicIpName>

Name : sub2-pip1

ResourceGroupName : PIP

Location : southeastasia

Id : /subscriptions/xxx/resourceGroups/xx/providers/Microsoft.Network/publicIPAddresses/sub2-pip1

//Resource ID
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Can we add application gateway public IP from 2 different subscription within same tenant as endpoint in Traffic Manager ?

1 answer

Your answer