Skip to main content
339 questions
Newest Active Bountied Unanswered
Filter by
Sorted by
Tagged with
0 votes
1 answer
70 views

I am in the process of building a custom RBAC role, only to delete & restore the App registration and service principals. I can manage delete actions and restore the App registration, but I don't ...
kalyani's user avatar
  • 31
0 votes
2 answers
136 views

I there anything different/off with assigning Azure RBAC roles via "Management Groups" rather than applying directly to say a subscription or a resource group? I have an Azure App ...
Scott's user avatar
  • 117
0 votes
0 answers
278 views

Azure Search Index Scoped RBAC Bug Minimum Working Example You will need an Azure Search Service and two accounts. An admin account and a service account that you can change permissions on at the ...
Alejandro's user avatar
  • 664
0 votes
0 answers
107 views

Problem: I am trying to implement RBAC for Azure Search Service. I need to deny/approve users access to index resources based on their role. I need to get access tokens for the users programmatically ...
Laurent's user avatar
  • 69
0 votes
1 answer
134 views

When deploying our web app application, we knew that we wanted to import certificates to web app from Key vault. However, we've managed to get a lot of issues along the way and wanted to see if there ...
Viktoria's user avatar
  • 13
0 votes
1 answer
828 views

How to restrict an Cosmos DB Built-in Data Contributor role assignment to a specific database or container within an Cosmos DB account? I'm using the same Cosmos DB account for multiple databases, but ...
Shuzheng's user avatar
  • 14.6k
0 votes
1 answer
227 views

I have the strange issue where I dont understand why Im having the authorization error: Im running this code with out any error: dbutils.fs.ls("abfss://[email protected]/&...
play_something_good's user avatar
  • 137
0 votes
2 answers
126 views

I am able to read events from Iot Hub (Event Hub) when using SAS Key but when I try using Azure Credentials, it gives me the error What's working: When trying to use EventHubConnection with the SAS ...
tridy's user avatar
  • 1,334
0 votes
1 answer
140 views

I have an event grid domain. It has multiple topics like topic 1, topic 2 etc. I have event publishers called publisher 1, publisher 2 etc. I want to restrict publisher 1 to topic 1, i.e. publisher 1 ...
Azure Dev's user avatar
  • 107
0 votes
1 answer
82 views

So I'm creating a custom role.. let's call it "MyCompanyDeveloperRole" I go onto the function app in the portal logged in as someone with that role. It won't render the function apps list on ...
Andrew Duffy's user avatar
  • 619
1 vote
1 answer
595 views

I'm working on creating a Synapse pipeline in Azure, and I'm facing an issue while setting up a linked service to connect to a self-hosted MSSQL server. Here are the details of my setup: Source: Self-...
Ishwar Jangid's user avatar
  • 317
0 votes
1 answer
275 views

I have a module that assigns the Azure Service Bus Sender role to the managed idenity for an app service. I need to set the scope to the actual instance of the service bus, but it's not in the same ...
Don Chambers's user avatar
  • 4,375
0 votes
1 answer
151 views

I’m trying to understand the difference between the permissions: Microsoft.Sql/servers/databases/vulnerabilityAssessments and Microsoft.Sql/servers/databases/sqlVulnerabilityAssessments. I need to ...
michael__'s user avatar
  • 82
0 votes
1 answer
197 views

I am experiencing a permissions issue with Azure alerts that I cannot resolve. Here are the details of my setup: Subscription A: Contains a log-based alert. Subscription B: Contains a Log Analytics ...
Auto geek's user avatar
  • 512
0 votes
3 answers
177 views

I’m trying to assign "Reader" role to user under Azure subscription using Azure Python SDK. I’ve found a way to do it using Azure REST API following MS documentation https://learn.microsoft....
James Wilton's user avatar
  • 15
0 votes
1 answer
201 views

Im trying to assing the AD group to my storage account as contributor and also storage blob data contributor using the Servicie principal that is owner at sub level. param storageAccountName string ...
play_something_good's user avatar
  • 137
0 votes
1 answer
230 views

Im trying to do a role assignment usig BICEP. My goal is to assign the Databricks Access connector as the storage blob data contributor on Storage account. Im deploying both, Databricks (with managed ...
play_something_good's user avatar
  • 137
0 votes
5 answers
3k views

I am trying to send email using Azure Communication Service and DefaultAzureCredential from my local machine but I am getting the following error: Azure.Identity.AuthenticationFailedException: Azure ...
Gaurav Mantri's user avatar
  • 137k
0 votes
1 answer
203 views

Im trying to assign multiple AD group to Multiple RBAC roles to my storage account. So I need to Loop through my adGroup variable ( array) and then need to also loop all my RoleIDs to assign each of ...
play_something_good's user avatar
  • 137
1 vote
1 answer
70 views

I need to fetch users and applications assigned the "Reader" role under a specific Azure subscription using the Azure Python SDK. The AuthorizationManagementClient is being used along with ...
James Wilton's user avatar
  • 15
0 votes
0 answers
27 views

With current geneva action "Self serve apply role update", to pause after canary region, we have to manually change wait time which is error prone, planning to automate using AzDeployer / ...
user7382158's user avatar
  • 1
0 votes
1 answer
461 views

I'm working on automating eligible role assignments with conditions for Azure resources via REST calls. Specifically to add condition when assigning Owner role to allow users for assigning only roles ...
user5646231's user avatar
  • 15
0 votes
1 answer
93 views

We have an on-prem solution where a Windows Service (on a Windows Server VM) accesses a SQL Server database on another Windows Server VM. The Windows Service runs under a certain domain user (Log On), ...
Poppert's user avatar
  • 427
0 votes
1 answer
596 views

I have an azure key vault with public access disabled and using a private endpoint to bring it into the subnet. Azure App Service and Function app are able to access the key vault using managed ...
Andrew Duffy's user avatar
  • 619
0 votes
1 answer
331 views

I myself am the Global Administrator and Owner of the Resource Group and Key Vault, but I am unable to "Access Policies" in Azure Portal. I have even gone into to give myself further ...
Mohsin Khubaib Ahmed's user avatar
  • 1,018
0 votes
1 answer
1k views

While adding role assignments for storage account I use user assigned managed identity RoleAssignmentCreateOrUpdateContent roleData = new RoleAssignmentCreateOrUpdateContent( roleDefinitionId: new ...
ranger's user avatar
  • 27
1 vote
1 answer
247 views

I’m automating Azure eligible role assignments using REST API calls and currently have a setup where Owner eligible role assignment restricts users to assign roles like Reader and Storage Blob Data ...
user5646231's user avatar
  • 15
0 votes
1 answer
645 views

I have some terraform where the Service Principal is Owner of the Subscription. And it can create a compute instance on AML. I assigne a user and the user can connect to it. But when I create myself, ...
BeGreen's user avatar
  • 1,033
0 votes
1 answer
353 views

I'm unable to create a Service Connection for a Management Group. Below are more details I have created a Management Group (my-mg)and added/assigned 2 subscriptions (dev-sub & prod-sub) Created an ...
Prawin's user avatar
  • 1,278
0 votes
1 answer
1k views

I'm working on setting up an access control strategy for our Azure landing zones and need assistance with implementing a specific Azure Policy. Here's the scenario: I want to create a custom role ...
Nadia Hansen's user avatar
  • 1,017
0 votes
1 answer
2k views

I have created an Azure Keyvault. I have added a certificate and private key to the Keyvault. The keyvault is using Role Based Access Controls. I have an Azure AD user account I am trying to grant ...
Appleoddity's user avatar
  • 1,261
1 vote
1 answer
136 views

I can't get this ADLS Linked Service(LS) to work. I tried publicAccess blob, container, and private for the container. I have allowBlobPublicAccess:true for the storage account. I was able to create ...
Mir Ali's user avatar
  • 13
2 votes
1 answer
2k views

If an Azure user has Contributor rights to a Subscription and they create a resource under that subscription e.g. a Storage Account. Should that user be automatically granted owner rights over the ...
Caleb Seadon's user avatar
  • 724
0 votes
0 answers
155 views

I have 10 secrets in dev namespace and I need to restrict only 2 secrets access from others I have enabled Azure RBAC for both authorization and authentication, How to achieve this? Since I am using ...
Arockia Daniel's user avatar
  • 3
0 votes
1 answer
269 views

I have to use the weather API from Azure MAPS with Shared access signature token authentication I have followed the instructions from here: https://github.com/MicrosoftDocs/azure-docs/blob/main/...
dk13's user avatar
  • 1,511
0 votes
1 answer
921 views

I have a user (MemberUser1) that is also member of my subcription and member of a group "Group1". This group has access defined in the assigned role of some resources" SQL server and ...
Eduardo Scheffer's user avatar
  • 1
0 votes
1 answer
2k views

A developer has reported they cant "Resume" a dedicated database via the Azure Portal as the menu option is greyed-out - see screen shot below. I tried adding a Azure Entra group the ...
Ian Carrick's user avatar
  • 394
0 votes
1 answer
140 views

Below errors occur when executing a DevOps pipeline using Yaml AzureCLI@2 task. ERROR: Insufficient privileges to complete the operation. ERROR: argument --assignee-object-id: expected one argument ...
Dean's user avatar
  • 43
-1 votes
2 answers
5k views

I'm unable to login to Azure Virtual Machine with Azure AD credential even if select the Option Azure AD Domain Joined while creating the Azure VM. I'm always getting The Logon attempt failed error. ...
Jinnyroy's user avatar
  • 11
0 votes
1 answer
232 views

I just created a speech service, but when I go to "Audio Content Creation", I can't do anything (New - Upload - Export) I tried to add myself as owner role, and other roles, but still, I ...
abdelrahman's user avatar
  • 15
3 votes
2 answers
2k views

I would like provide read only access to an the Application Settings of an app service. Specifically by Application Settings of an App Service, I'm referring to the 4 tabs that appear when you open ...
Andy Palmer's user avatar
  • 115
0 votes
1 answer
580 views

I'm utilizing Bicep to enable Azure AD Privileged Identity Management (PIM) with a custom role. I've created an AD Group and assigned a Custom Role to it, which includes the following actions: "...
CharismaticDevelop's user avatar
  • 11
1 vote
1 answer
189 views

I can get subsriptions using token captured from browser: Then I switch to Python and msal. I use the following code: import msal import requests import sys import json data = json.load(open("...
SodaCris's user avatar
  • 558
5 votes
3 answers
13k views

I have an application (AWX) with a script that is trying to perform an action in Azure (add tags to a vm). In AWX, I get the following error, apparently from Azure: msg: "Error retrieving ...
208_man's user avatar
  • 1,808
0 votes
1 answer
423 views

I am getting an error while assigning role to managed identity in storage account RBAC Code: RoleAssignmentCreateOrUpdateContent roleData = new RoleAssignmentCreateOrUpdateContent( roleDefinitionId: ...
ranger's user avatar
  • 27
0 votes
1 answer
771 views

My service principle has reader role on the resource group. I'm trying to deploy the release pipeline for adf in Azure DevOps but got the below error: The client 'XXXXXXXXXXX' with object id '...
Nilesh Patel's user avatar
  • 45
0 votes
1 answer
189 views

I am trying to install the Azure Marketplace SaaS Accelerator using Azure Cloud Shell, following the installation instructions provided in the GitHub repository. However, I encounter errors when ...
Robert Green MBA's user avatar
  • 1,896
0 votes
1 answer
511 views

I'm troubleshooting an issue where an app registration is unable to query the subscriptions within an Azure tenant, despite a role assignment granting it access at the tenant root group level. ...
Eschatos's user avatar
  • 3
0 votes
1 answer
513 views

I`ve created custom RBAC role for my personal storage account, the assignment scope is on resource group level. The issue is other storage accounts are also present in this resource group. So the ...
Quies's user avatar
  • 5
0 votes
2 answers
4k views

I am trying to access the Directory activity log in my Azure tenant, but I am getting the error that I don't have permission to view Directory log. I am trying to figure out if anyone know the ...
Nader Sipahy's user avatar
  • 13

1
2 3 4 5
…
7