Merge pull request #102722 from johndowns/patch-9

Include information about using ARM templates to add administrator role

Author: GitHubber17

articles/analysis-services/analysis-services-addservprinc-admins.md

@@ -7,23 +7,26 @@ ms.topic: conceptual
 ms.date: 10/29/2019
 ms.author: owend
 ms.reviewer: minewiskan
+ms.custom: fasttrack-edit
 
 ---
 
 # Add a service principal to the server administrator role 
 
- To automate unattended PowerShell tasks, a service principal must have **server administrator** privileges on the Analysis Services server being managed. This article describes how to add a service principal to the server administrators role on an Azure AS server.
+ To automate unattended PowerShell tasks, a service principal must have **server administrator** privileges on the Analysis Services server being managed. This article describes how to add a service principal to the server administrators role on an Azure AS server. You can do this using SQL Server Management Studio or a Resource Manager template.
+ 
+> [!NOTE]
+> For server operations using Azure PowerShell cmdlets, the service principal must also belong to the **Owner** role for the resource in [Azure Role-Based Access Control (RBAC)](../role-based-access-control/overview.md). 
 
 ## Before you begin
 Before completing this task, you must have a service principal registered in Azure Active Directory.
 
 [Create service principal - Azure portal](../active-directory/develop/howto-create-service-principal-portal.md)   
 [Create service principal - PowerShell](../active-directory/develop/howto-authenticate-service-principal-powershell.md)
 
-## Required permissions
-To complete this task, you must have [server administrator](analysis-services-server-admins.md) permissions on the Azure AS server. 
+## Using SQL Server Management Studio
 
-## Add service principal to server administrators role
+You can configure server administrators using SQL Server Management Studio (SSMS). To complete this task, you must have [server administrator](analysis-services-server-admins.md) permissions on the Azure AS server. 
 
 1. In SSMS, connect to your Azure AS server.
 2. In **Server Properties** > **Security**, click **Add**.
@@ -35,9 +38,60 @@ To complete this task, you must have [server administrator](analysis-services-se
 
     ![Search for service principal account](./media/analysis-services-addservprinc-admins/aas-add-sp-ssms-add.png)
 
-
-> [!NOTE]
-> For server operations using Azure PowerShell cmdlets, service principal running scheduler must also belong to the **Owner** role for the resource in [Azure Role-Based Access Control (RBAC)](../role-based-access-control/overview.md). 
+## Using a Resource Manager template
+
+You can also configure server administrators by deploying the Analysis Services server using an Azure Resource Manager template. The identity running the deployment must belong to the **Contributor** role for the resource in [Azure Role-Based Access Control (RBAC)](../role-based-access-control/overview.md).
+
+> [!IMPORTANT]
+> The service principal must be added using the format `app:{service-principal-client-id}@{azure-ad-tenant-id}`.
+
+The following Resource Manager template deploys an Analysis Services server with a specified service principal added to the Analysis Services Admin role:
+
+```json
+{
+    "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
+    "contentVersion": "1.0.0.0",
+    "parameters": {
+        "analysisServicesServerName": {
+            "type": "string"
+        },
+        "location": {
+            "type": "string"
+        },
+        "analysisServicesSkuName": {
+            "type": "string"
+        },
+        "analysisServicesCapacity": {
+            "type": "int"
+        },
+        "servicePrincipalClientId": {
+            "type": "string"
+        },
+        "servicePrincipalTenantId": {
+            "type": "string"
+        }
+    },
+    "resources": [
+        {
+            "name": "[parameters('analysisServicesServerName')]",
+            "type": "Microsoft.AnalysisServices/servers",
+            "apiVersion": "2017-08-01",
+            "location": "[parameters('location')]",
+            "sku": {
+                "name": "[parameters('analysisServicesSkuName')]",
+                "capacity": "[parameters('analysisServicesCapacity')]"
+            },
+            "properties": {
+                "asAdministrators": {
+                    "members": [
+                        "[concat('app:', parameters('servicePrincipalClientId'), '@', parameters('servicePrincipalTenantId'))]"
+                    ]
+                }
+            }
+        }
+    ]
+}
+```
 
 ## Related information