Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 4 years ago.
Improve this question
Daniel explains it here how to start and stop a VM located on Azure.
I cannot do this as I cannot find Create Azure Run As Account
I believe my account is limited by the account owner.
What do I Need to ask to get this permission?
I have a Contributor role with Access to one particular subscription.
I am in a middle Company owned by a bigger Company.
I would like to give a developer the ability to start and stop a VM he is using.
As you said this is because you don't have enough privileges(roles) to Create Azure run as Account.You need to get Owner/Co-Administator role of that particular subscription to enable this.
Difference between owner role and contributor role
You need to request your company higher official who has owner roles for your Azure subscription to add your account as Owner/Co-Administator role for that particular subscription
Like it explained here
Related
Closed. This question is not about programming or software development. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 3 months ago.
Improve this question
I am in an organization on azure with the following roles:
Another member with the same roles created an azure VM that I can not see in my virtual machine interface. It always takes me to this window whenever I search Virtual Machine.
When I access the link shared by the other person to access the page, it will lead me to this error page:
Having the role of Global admin, should not I be able to access everything in the organization setup?
This is the current license of the organization
Note that, Azure AD roles are different from Azure RBAC roles.
You have Azure AD roles that will only help you to manage Azure AD resources like users, groups, applications etc., and won't give access for Azure resources.
To manage Azure resources like virtual machines, storage accounts etc., you need Azure RBAC roles that links with subscription.
I tried to reproduce the same in my environment and got below results:
I created one Azure AD user named Test user and assigned same roles as you like below:
When I signed in with above Test user account, I got the same screen as you like below:
I got the same error as you when I tried to access virtual machine like below:
You can check with other members what Azure RBAC role they have under virtual machine as below:
To resolve the error, get yourself assigned with the same RBAC role the other member has, under your subscription like below:
After getting that role, you can access the virtual machine successfully like below:
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 1 year ago.
Improve this question
I am trying to connect Azure DevOps with Azure KeyVault by whitelisting the IP addresses of Azure DevOps into the key vault. Now I need to add the service tag of Azure DevOps into KeyVault. I am following the below process to do it. Please correct me if I am wrong?
Create a Network Security Group
Click on Inbound security rules
Click on Add button to add a rule
Select Source as “Service Tag”
Select the Souce service tag as “AzureDevOps” (unfortunately this tag is not available).
Please let me know how can I add the Service Tag of Azure DevOps in the Network security group and map the Network Security Group with Azure Key Vault?
As of today they are available on the Portal (18-11-2021)
Original reply
You can't. Azure Devops Service Tag is not available from the Portal
Info taken from documentation.
Now that a service tag has been set up for Azure DevOps Services, customers can easily allow access by adding the tag name AzureDevOps to their NSGs or firewalls programmatically using Powershell and CLI.
Here os the info on the blog.
And what is important here is:
The Service Tag does not apply to Microsoft Hosted Agents. Customers are still required to allow the entire geography for the Microsoft Hosted Agents. If allowing the entire geography is a concern, we recommend using the Azure Virtual Machine Scale Set Agents. The Scale Set Agents are a form of self-hosted agents that can be autoscaled to meet your demands.
Closed. This question is opinion-based. It is not currently accepting answers.
Want to improve this question? Update the question so it can be answered with facts and citations by editing this post.
Closed 4 years ago.
Improve this question
Microsoft strongly recommend to use Microsoft Graph instead of Azure AD Graph API to access Azure Active Directory resources
There are a very limited number of scenarios for which Azure AD Graph API might still be appropriate according to this post written in 2017 May.those Gaps between Microsoft Graph and Azure AD Graph still exist ?
Yes.
For example Applications and Service principals are only available on the beta endpoint for MS Graph API.
And the beta endpoint is not recommended to be used in production applications.
So if you need to make automation related to app registrations, permissions etc., AAD Graph is still the way to do it safely.
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 6 years ago.
Improve this question
Is there a way to create a VM Scaleset in an existing Azure Resource Group?
Currently the portal does not show that as an option, is it possible through powershell?
Yes, when we create VMSS via Azure poratl, we can't choose an existing Azure resource group, you can use PowerShell to create a VMSS in an existing Azure group, more information about how to use PowerShell to create VMSS, refer to the link.
In the example, we can use $rgname = "myresourcegroupname", about New-AzureRmResourceGroup -Name $rgname -Location $loc is optional.
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 9 years ago.
Improve this question
sorry for my english...
I have a subscription to Office 365 (E3 Plan) with domain mycompany.onmicropsoft.com and another subscription to Windows Azure (myotherdomain.onmicrosoft.com).
At the moment on Azure, into WAAD I don't see the Office 365 users and vice versa, but I'd like to have centralized management by azure.
how can I do to associate the Windows Azure subscription to Office365 subscription so that I can manage Office365 users with Windows Azure.
Thank You
Michele