Welcome back to AZ 103 my fellow coders. Now that we have created our Azure Subscription, it is time to learn how to create accounts and assign permissions. Like any Network deployment there will be different levels of permissions based on the tasks that users need to complete, and therefore Microsoft recommends (RBAC) Role Based Access control. Wink Wink
If you have had an Azure account for a while you will remember that the classic deployment used roles such as: Service Administrator and Co-Administrator. You only need to add a Co-Administrator if the user needs to manage Azure classic deployments by using Azure Service Management PowerShell Module otherwise you should just create new users.
Now, let’s get rolling on creating that first user and then we will assign them a role:
- Log in to: https://portal.azure.com
- Click Home à and then Click Users
Note: If you don’t see Users, no worry, just type it into that Search Bar at the top
- Click New User
- You will have the Option to Create User or Invite, we will be Creating a User
- Under Groups and Roles click next to Roles Click User and you will see the Millions of Roles options pop up. Yes, Microsoft has a ton of them! Select One(s) that apply to the user you are creating.
Note: To learn more about the numerous Azure Roles please check out the following: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/directory-assign-admin-roles
- Under Settings you will see Usage Location: Ensure you Select the location where your Azure Deployment was created, this will ensure that users you create are placed in server closet to your deployment.
- Click Create. Woohoo… that’s it.
***Bonus: Alternate way to assign Roles (If you have already created your User(s):***
- From your Azure Homepage Click or Search for Subscriptions
- Select your Subscription Name
- Click Access Control (IAM) Identity and Access Management –> Role Assignments
- +Add Role Assignment
- You will then see a new pop up to Select the Role from the Drop Down and Users from a List.
Well, we have reached the end of today’s lesson my fellow DEVs and Cloud Enthusiast. Until next time….