|
1 | 1 | ---
|
2 | 2 | title: Azure Red Hat OpenShift cluster administrator role | Microsoft Docs
|
3 |
| -description: Azure Red Hat OpenShift cluster administrator role assignment and usage |
| 3 | +description: Assignment and usage of the Azure Red Hat OpenShift cluster administrator role |
4 | 4 | services: container-service
|
5 | 5 | author: mjudeikis
|
6 | 6 | ms.author: b-majude
|
7 | 7 | ms.author: jzim
|
8 | 8 | ms.service: container-service
|
9 | 9 | ms.topic: article
|
10 | 10 | ms.date: 09/25/2019
|
11 |
| -#Customer intent: As a developer, I need to understand how to administer and Azure Red Hat cluster using administrative role |
| 11 | +#Customer intent: As a developer, I need to understand how to administer an Azure Red Hat cluster by using the administrative role |
12 | 12 | ---
|
13 | 13 |
|
14 | 14 | # Azure Red Hat OpenShift customer administrator role
|
15 | 15 |
|
16 |
| -As an ARO (Azure Red Hat OpenShift) cluster administrator of an OpenShift cluster, your account has increased permissions and access to all user-created projects. |
| 16 | +You're the cluster administrator of an Azure Red Hat OpenShift cluster. Your account has increased permissions and access to all user-created projects. |
17 | 17 |
|
18 |
| -When your account has the osa-customer-admins authorization role bound to it, it can automatically manage a project. |
| 18 | +When your account has the osa-customer-admin authorization role bound to it, it can automatically manage a project. |
19 | 19 |
|
20 | 20 | > [!Note]
|
21 |
| -> osa-customer-admin clusterrole is not the same as cluster-admin clusterrole |
| 21 | +> The osa-customer-admin cluster role is not the same as the cluster-admin cluster role. |
22 | 22 |
|
23 | 23 |
|
24 | 24 | For example, you can execute actions associated with a set of verbs (`create`) to operate on a set of resource names (`templates`). To view the details of these roles and their sets of verbs and resources, run the following command:
|
25 | 25 |
|
26 | 26 | `$ oc describe clusterrole/osa-customer-admin`
|
27 | 27 |
|
28 |
| -The verb names do not necessarily all map directly to oc commands, but rather equate more generally to the types of CLI operations you can perform. For example, having the `list` verb means that you can display a list of all objects of a given resource name (`oc get`), while the `get` verb means that you can display the details of a specific object if you know its name (`oc describe`). |
| 28 | +The verb names don't necessarily all map directly to `oc` commands. They equate more generally to the types of CLI operations that you can perform. |
29 | 29 |
|
30 |
| -## How to configure customer administrator role |
| 30 | +For example, having the `list` verb means that you can display a list of all objects of a resource name (`oc get`). The `get` verb means that you can display the details of a specific object if you know its name (`oc describe`). |
31 | 31 |
|
32 |
| -Customer administrator role can be configured only during cluster creation by providing flag `--customer-admin-group-id`. How to configure Azure Active Directory and Administrators group follow how to guide: [Azure Active Directory integration for Azure Red Hat OpenShift](howto-aad-app-configuration.md) |
| 32 | +## Configure the customer administrator role |
| 33 | + |
| 34 | +You can configure the customer administrator role only during cluster creation by providing the flag `--customer-admin-group-id`. To learn how to configure Azure Active Directory and the Administrators group, see [Azure Active Directory integration for Azure Red Hat OpenShift](howto-aad-app-configuration.md). |
33 | 35 |
|
34 | 36 | ## Next steps
|
35 | 37 |
|
36 |
| -How to configure osa-customer-admin role: |
| 38 | +Configure the osa-customer-admin role: |
37 | 39 | > [!div class="nextstepaction"]
|
38 | 40 | > [Azure Active Directory integration for Azure Red Hat OpenShift](howto-aad-app-configuration.md)
|
0 commit comments