851 questions with Azure Role-based access control tags

Sort by: Updated
1 answer

How to authorize Entra ID apps as “apps” instead of “service principals

I registered my app through “Entra ID” for integration with New Relic. I granted the apps registered with the subscriptions to be viewed. Then, in the access control list, it was registered as a “service principal” instead of an “app”. How can I register…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,621 questions
asked 2024-12-19T08:54:46.2566667+00:00
Shashiki.T 0 Reputation points
commented 2024-12-20T23:01:18.8233333+00:00
James Hamil 26,386 Reputation points Microsoft Employee
1 answer

Set up as Workspace Owner and Data Scientist role, but cannot create notebooks/write files

I just set up a Workspace under my Subscription, and am the Owner on both. I'm trying to work in Azure ML in this Workspace, where I have a Azure ML Data Scientist role for myself as well, and keep getting this message when I try to create a new…

Azure Machine Learning
Azure Machine Learning
An Azure machine learning service for building and deploying models.
3,043 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
asked 2024-12-11T17:33:08.7733333+00:00
Stephen 0 Reputation points Microsoft Employee
commented 2024-12-20T19:49:01.5433333+00:00
Stephen 0 Reputation points Microsoft Employee
1 answer

Role to manage auto-shutdown of VM

We are encountering an issue where a user with appropriate roles and permissions is unable to manage the auto-shutdown feature for Azure Virtual Machines (VMs). Despite assigning the built-in DevTest Labs User role and attempting several combinations of…

Azure Virtual Machines
Azure Virtual Machines
An Azure service that is used to provision Windows and Linux virtual machines.
8,167 questions
Azure DevTest Labs
Azure DevTest Labs
An Azure service that is used for provisioning development and test environments.
280 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
asked 2024-12-20T07:30:23.5066667+00:00
Rahul Kamble 0 Reputation points
answered 2024-12-20T12:05:11.9266667+00:00
akinbade abiola 21,040 Reputation points
1 answer One of the answers was accepted by the question author.

What Azure role assignments would i need to allow a dba permissions to manage Azure SQL resources including storage accounts?

I am looking at assigning role assignments to a DBA to manage Azure SQL resources from the Azure Portal including managing a specific storage account. Currently, the permissions are set as follows: Contributor Reader SQL Security Manager …

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
asked 2022-06-10T12:42:30.167+00:00
Schieman, Paul 21 Reputation points
accepted 2024-12-20T02:45:13.6066667+00:00
Schieman, Paul 21 Reputation points
1 answer

What is the API needed permission in order to assign a role to a user (in entraId)

I'm doing a call to this endpoint (@POST): https://graph.microsoft.com/v1.0/roleManagement/directory/roleAssignments with this payload: { "@odata.type": "#microsoft.graph.unifiedRoleAssignment", "roleDefinitionId":…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
asked 2024-12-19T09:00:40.01+00:00
EntraDeveloper 0 Reputation points
answered 2024-12-20T02:34:14.53+00:00
Raja Pothuraju 9,805 Reputation points Microsoft Vendor
1 answer One of the answers was accepted by the question author.

How to give full Azure admin access to my CTO

Hi, I am having trouble giving my CTO full access to everything in Azure, which results in random situations where I am personally required to sign in just to change a setting. We have already tried giving ownership permissions everywhere we find them,…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
asked 2024-12-17T22:07:33.5166667+00:00
Akil Bhagat 20 Reputation points
commented 2024-12-19T20:09:41.8+00:00
Akil Bhagat 20 Reputation points
0 answers

Accepting Recommendations on Access Review for Entra ID Access Packages Throws an Error

I am an Entra ID Access Package Reviewer. Usually, I just accept recommendations but recently, I have been getting this error message: Error: Exception of type…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,621 questions
asked 2024-12-19T19:37:40.68+00:00
Arun Nair 175 Reputation points
0 answers

Im trying to configure a Azure connector on LCS but its failing

Im trying to configure a Azure connector on LCS but its failing. When I try to add "DD Dynamics Deployment Services [wsfed-enabled] (pme)" in the role assignment its not showing.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
asked 2024-12-06T10:43:46.1066667+00:00
VishTrial D365FO 0 Reputation points
commented 2024-12-19T18:13:19.6033333+00:00
Raja Pothuraju 9,805 Reputation points Microsoft Vendor
1 answer

Unable to get email alert for PIM role activation

Hello, we used to receive emails from Microsoft Azure for the PIM roles activation but It just stopped. Nothing changed just we are no longer receiving emails for role activation. Can you please help me with this? Thanks!

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
Access
Access
A family of Microsoft relational database management systems designed for ease of use.
419 questions
asked 2024-12-05T17:18:37.2366667+00:00
Yasin Turan 0 Reputation points
commented 2024-12-19T14:14:06.97+00:00
Yasin Turan 0 Reputation points
1 answer One of the answers was accepted by the question author.

What API permission do I need in order to assign role to a user

I'm doing a (@POST) request the role assignment endpoint https://graph.microsoft.com/v1.0/roleManagement/directory/roleAssignments with this payload: { "@odata.type": "#microsoft.graph.unifiedRoleAssignment", …

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
asked 2024-12-19T10:00:15.6166667+00:00
MIRIAM GRAHAM 40 Reputation points
accepted 2024-12-19T11:41:39.8666667+00:00
MIRIAM GRAHAM 40 Reputation points
1 answer

Infiinte Loop MFA

I just got a new iPhone, and my authenticator app does not have my previous accounts stored. I am receiving a request to sign in with the Auth App, but when I click "I can't use my Microsoft Authenticator app right now," it just keeps looping…

Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
7,490 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
Microsoft Entra Internet Access
Microsoft Entra Internet Access
A Microsoft Entra service that provides an identity-centric Secure Web Gateway that protects access to internet, software as a service (SaaS), and Microsoft 365 apps and resources.
28 questions
asked 2024-12-18T23:15:57.1566667+00:00
Kevin Doan 5 Reputation points
answered 2024-12-19T04:43:22.2933333+00:00
Sandeep G-MSFT 20,266 Reputation points Microsoft Employee
1 answer

How to Grant Precise Access Control Rights for viewing Azure Front Door Reports?

It appears that enabling a user with precise Access Control permissions, specifically tailored to viewing Reports and Security Reports for Azure Front Door, may not be achievable or, at the very least, is not well-documented. Even after granting them the…

Azure Front Door
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
708 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
asked 2023-11-01T14:03:38.5933333+00:00
Bart van der Braak 10 Reputation points
commented 2024-12-18T18:19:59.91+00:00
Bart van der Braak 10 Reputation points
2 answers

Unable to Access Log Analytics Demo (aka.ms/lademo)

Hello, I have been using the log analytics demo environment to help train for the last month for KQL. Recently, I have no idea what changed, but I have lost access the the public and free environment at "aka.ms/lademo". I have tried all…

Azure Monitor
Azure Monitor
An Azure service that is used to collect, analyze, and act on telemetry data from Azure and on-premises environments.
3,394 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,196 questions
asked 2024-12-09T17:12:58.2033333+00:00
Colin Colón 25 Reputation points
edited the question 2024-12-18T07:58:35.9566667+00:00
Rakesh Gurram 10,545 Reputation points Microsoft Vendor
0 answers

I need to reactivate an account that was disabled on August 15 to recover documents...

We are a company with enough subscriptions and a domain. I need to reactivate an account that was disabled on August 15th to recover documents.

Azure Storage Accounts
Azure Storage Accounts
Globally unique resources that provide access to data management services and serve as the parent namespace for the services.
3,290 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
Access
Access
A family of Microsoft relational database management systems designed for ease of use.
419 questions
Azure Site Recovery
Azure Site Recovery
An Azure native disaster recovery service. Previously known as Microsoft Azure Hyper-V Recovery Manager.
737 questions
asked 2024-12-17T20:05:51.3033333+00:00
Yafte Caballero 0 Reputation points
edited a comment 2024-12-17T22:26:56.8766667+00:00
KarishmaTiwari-MSFT 20,307 Reputation points Microsoft Employee
1 answer

What does the "Microsoft.Authorization/elevateAccess/action" role actually do? A sub permission of the User Access Administistrator Azure resource role

I've got some questions relating to the User Access Administrator Azure resource role. Because it grants Microsoft.Authorization/*, it means that Microsoft.Authorization/elevateAccess/action is a part of that permission set. That permission is defined…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,621 questions
asked 2022-11-02T20:29:53.617+00:00
Johnathan Welker 106 Reputation points
commented 2024-12-17T18:57:35.0966667+00:00
Godrey, Nick J 0 Reputation points
1 answer One of the answers was accepted by the question author.

Exporting Management Groups with Role Assignment(IAM)

Is it possible to generate a report via PowerShell on all Management Groups and Subscriptions with all role assignment permissions details.

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,621 questions
asked 2022-02-28T13:32:09.55+00:00
H Raja 281 Reputation points
accepted 2024-12-14T20:29:17.2033333+00:00
H Raja 281 Reputation points
3 answers One of the answers was accepted by the question author.

PIM: How to set approvers in Role Management Policy approval rule for "Require approval to activate" possibility in PIM role settings by Powershell using Update-AzRoleManagementPolicy command?

Hello everyone, I need to configure "RoleManagementPolicyApprovalRule" rule for updating role management policy on resource group scope for Contributor role in PIM settings automatically from Powershell code. I'm following this documentation…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
PowerShell
PowerShell
A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
2,704 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,621 questions
asked 2024-12-09T10:34:17.2666667+00:00
Ruslan Rahozhkin 25 Reputation points
accepted 2024-12-13T17:06:58.4033333+00:00
Ruslan Rahozhkin 25 Reputation points
1 answer

Why does "Key Vault Certificate User" role have permissions to read keys and secrets as well?

Key Vault Built-In Role Assignment "Key Vault Certificate User" has permissions to read keys and secrets as well. Note that the more privileged role "Key Vault Certificates Officer" on the other hand doesn't have permissions to read…

Azure Key Vault
Azure Key Vault
An Azure service that is used to manage and protect cryptographic keys and other secrets used by cloud apps and services.
1,340 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
asked 2024-09-09T08:32:50.57+00:00
Karan Agarwal 0 Reputation points Microsoft Employee
edited a comment 2024-12-12T10:08:26.0733333+00:00
Karan Agarwal 0 Reputation points Microsoft Employee
1 answer One of the answers was accepted by the question author.

Access error 403 for Synapse Analytics

When navigating to my Synapse Analytics workspace I see a popup indicating a 403 error like below. When checking my access I have both Contributor and Owner to the Resource Group. Failed to load one or more resources due to no access, error code 403. …

Azure Synapse Analytics
Azure Synapse Analytics
An Azure analytics service that brings together data integration, enterprise data warehousing, and big data analytics. Previously known as Azure SQL Data Warehouse.
5,089 questions
Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
asked 2024-12-06T14:02:47.4566667+00:00
Johnson, Robert 20 Reputation points
accepted 2024-12-10T05:00:09.4166667+00:00
Johnson, Robert 20 Reputation points
2 answers

What Admin Role Allows Releasing Quarantined Emails?

I am looking to add permissions to an admin account that allows this admin to release quarantined emails. I do not want to give them global admin, but I have not found a admin role that allows someone to release these emails. As a global reader this user…

Azure Role-based access control
Azure Role-based access control
An Azure service that provides fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs.
851 questions
Outlook Management
Outlook Management
Outlook: A family of Microsoft email and calendar products.Management: The act or process of organizing, handling, directing or controlling something.
5,355 questions
asked 2024-05-16T13:40:49.29+00:00
Taylor 0 Reputation points
answered 2024-12-05T19:38:12.8966667+00:00
Elliott, Mike 0 Reputation points