Skip to content

Commit 32cba8d

Browse files
committed
Update
1 parent 19d9ff8 commit 32cba8d

File tree

3 files changed

+14
-14
lines changed

3 files changed

+14
-14
lines changed

articles/event-grid/mqtt-client-microsoft-entra-token-and-rbac.md

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
---
2-
title: Microsoft Entra JWT authentication and RBAC authorization for clients with Microsoft Entra identity
2+
title: Microsoft Entra `JWT` authentication and RBAC authorization for clients with Microsoft Entra identity
33
description: Describes JWT authentication and RBAC roles to authorize clients with Microsoft Entra identity to publish or subscribe MQTT messages
44
ms.topic: conceptual
55
ms.custom:
@@ -12,14 +12,14 @@ ms.subservice: mqtt
1212

1313
# Microsoft Entra JWT authentication and Azure RBAC authorization to publish or subscribe MQTT messages
1414

15-
You can authenticate MQTT clients with Microsoft Entra JWT to connect to Event Grid namespace. You can use Azure role-based access control (Azure RBAC) to enable MQTT clients, with Microsoft Entra identity, to publish or subscribe access to specific topic spaces.
15+
You can authenticate MQTT clients with Microsoft Entra JWT to connect to Event Grid namespace. You can use Azure role-based access control (Azure RBAC) to enable MQTT clients, with Microsoft Entra identity, to publish or subscribe access to specific topic spaces.
1616

1717
> [!IMPORTANT]
1818
> - This feature is supported only when using MQTT v5 protocol version
1919
> - JWT authentication is supported for Managed Identities and Service principals only
2020
2121
## Prerequisites
22-
- You need an Event Grid namespace with MQTT enabled. Learn about [creating Event Grid namespace](/azure/event-grid/create-view-manage-namespaces#create-a-namespace)
22+
- You need an Event Grid namespace with MQTT enabled. Learn about [creating Event Grid namespace](/azure/event-grid/create-view-manage-namespaces#create-a-namespace)
2323

2424
<a name='authentication-using-azure-ad-jwt'></a>
2525

@@ -44,21 +44,21 @@ In AUTH packet, you can provide required values in the following fields:
4444
Authenticate Reason Code with value 25 signifies reauthentication.
4545

4646
> [!NOTE]
47-
> - Audience: aud claim must be set to "https://eventgrid.azure.net/".
47+
> - Audience: `aud` claim must be set to `https://eventgrid.azure.net/`.
4848
4949
## Authorization to grant access permissions
50-
A client using Microsoft Entra ID based JWT authentication needs to be authorized to communicate with the Event Grid namespace. You can assign the following two built-in roles to provide either publish or subscribe permissions, to clients with Microsoft Entra identities.
50+
A client using Microsoft Entra ID based JWT authentication needs to be authorized to communicate with the Event Grid namespace. You can assign the following two built-in roles to provide either publish or subscribe permissions, to clients with Microsoft Entra identities.
5151

5252
- Use **EventGrid TopicSpaces Publisher** role to provide MQTT message publisher access
5353
- Use **EventGrid TopicSpaces Subscriber** role to provide MQTT message subscriber access
5454

55-
You can use these roles to provide permissions at subscription, resource group, Event Grid namespace or Event Grid topicspace scope.
55+
You can use these roles to provide permissions at subscription, resource group, Event Grid namespace, or Event Grid topic space scope.
5656

57-
## Assigning the publisher role to your Microsoft Entra identity at topicspace scope
57+
## Assigning the publisher role to your Microsoft Entra identity at topic space scope
5858

5959
1. In the Azure portal, navigate to your Event Grid namespace
60-
1. Navigate to the topicspace to which you want to authorize access.
61-
1. Go to the Access control (IAM) page of the topicspace
60+
1. Navigate to the topic space to which you want to authorize access.
61+
1. Go to the Access control (IAM) page of the topic space
6262
1. Select the **Role assignments** tab to view the role assignments at this scope.
6363
1. Select **+ Add** and Add role assignment.
6464
1. On the Role tab, select the "Event Grid TopicSpaces Publisher" role.
@@ -69,7 +69,7 @@ You can use these roles to provide permissions at subscription, resource group,
6969
1. Select **Review + assign** on the Review + assign tab.
7070

7171
> [!NOTE]
72-
> You can follow similar steps to assign the built-in EventGrid TopicSpaces Subscriber role at topicspace scope.
72+
> You can follow similar steps to assign the built-in Event Grid TopicSpaces Subscriber role at topic space scope.
7373
7474
## Next steps
7575
- See [Publish and subscribe to MQTT message using Event Grid](mqtt-publish-and-subscribe-portal.md)

articles/event-grid/mqtt-overview.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ MQTT is a publish-subscribe messaging transport protocol that was designed for c
4848
- **Last Will and Testament (LWT)** notifies your MQTT clients with the abrupt disconnections of other MQTT clients. You can use LWT to ensure predictable and reliable flow of communication among MQTT clients during unexpected disconnections.
4949
- **Persistent sessions** ensure reliability by preserving the client's subscription information and messages when a client disconnects.
5050
- **QoS 0 and 1** provide your clients with control over the efficiency and reliability of the communication.
51-
- MQTT broker is adding more MQTT v3.1.1 features in the future to align more with the MQTT specifications. The following items detail the current differences between features supported by MQTT broker and the MQTT v3.1.1 specification: Retain flag, Message ordering and QoS 2 aren't supported.
51+
- MQTT broker is adding more MQTT v3.1.1 features in the future to align more with the MQTT specifications. The following items detail the current differences between features supported by MQTT broker and the MQTT v3.1.1 specification: Retain flag, Message ordering, and QoS 2 aren't supported.
5252

5353
[Learn more about the MQTT broker and current limitations.](mqtt-support.md)
5454

articles/event-grid/overview.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ Azure Event Grid is used at different stages of data pipelines to achieve a dive
2424

2525
**MQTT messaging**. IoT devices and applications can communicate with each other over MQTT. Event Grid can also be used to route MQTT messages to Azure services or custom endpoints for further data analysis, visualization, or storage. This integration with Azure services enables you to build data pipelines that start with data ingestion from your IoT devices.
2626

27-
**Data distribution using push and pull delivery modes**. At any point in a data pipeline, HTTP applications can consume messages using push or pull APIs. The source of the data may include MQTT clients’ data, but also includes the following data sources that send their events over HTTP:
27+
**Data distribution using push and pull delivery modes**. At any point in a data pipeline, HTTP applications can consume messages using push or pull APIs. The source of the data might include MQTT clients’ data, but also includes the following data sources that send their events over HTTP:
2828

2929
- Azure services
3030
- Your custom applications
@@ -43,7 +43,7 @@ Event Grid offers a rich mixture of features. These features include:
4343
- **Publish-subscribe messaging model** - Communicate efficiently using one-to-many, many-to-one, and one-to-one messaging patterns.
4444
- **[Built-in cloud integration](mqtt-routing.md)** - Route your MQTT messages to Azure services or custom webhooks for further processing.
4545
- **Flexible and fine-grained [access control model](mqtt-access-control.md)** - Group clients and topic to simplify access control management, and use the variable support in topic templates for a fine-grained access control.
46-
- **MQTT broker authentication methods** - [X.509 certificate authentication](mqtt-client-authentication.md) is the industry authentication standard in IoT devices, [Microsoft Entra IDauthentication](mqtt-client-microsoft-entra-token-and-rbac.md) is Azure's authentication standard for applications and [OAuth 2.0 (JSON Web Token) authentication](oauth-json-web-token-authentication.md) provides a lightweight, secure, and flexible option for MQTT clients that are not provisioned in Azure.
46+
- **MQTT broker authentication methods** - [X.509 certificate authentication](mqtt-client-authentication.md) is the industry authentication standard in IoT devices, [Microsoft Entra IDauthentication](mqtt-client-microsoft-entra-token-and-rbac.md) is Azure's authentication standard for applications and [OAuth 2.0 (JSON Web Token) authentication](oauth-json-web-token-authentication.md) provides a lightweight, secure, and flexible option for MQTT clients that aren't provisioned in Azure.
4747
- **TLS 1.2 and TLS 1.3 support** - Secure your client communication using robust encryption protocols.
4848
- **Multi-session support** - Connect your applications with multiple active sessions to ensure reliability and scalability.
4949
- **MQTT over WebSockets** - Enable connectivity for clients in firewall-restricted environments.
@@ -151,7 +151,7 @@ Azure Event Grid features [pull CloudEvents delivery](pull-delivery-overview.md#
151151
One or more clients can connect to Azure Event Grid to read messages at their own pace. Event Grid affords clients full control on events consumption. Your application can receive events at certain times of the day, for example. Your solution can also increase the rate of consumption by adding more clients that read from Event Grid.
152152

153153
#### Consume events over a private link
154-
:::image type="content" source="media/overview/consume-private-link-pull-api.png" alt-text="High-level diagram of a consumer app inside a VNET reading events from Event Grid over a private endpoint inside the VNET." lightbox="media/overview/consume-private-link-pull-api-high-res.png" border="false":::
154+
:::image type="content" source="media/overview/consume-private-link-pull-api.png" alt-text="High-level diagram of a consumer app inside a virtual network reading events from Event Grid over a private endpoint inside the virtual network." lightbox="media/overview/consume-private-link-pull-api-high-res.png" border="false":::
155155

156156
You can configure **private links** to connect to Azure Event Grid to **publish and read** CloudEvents through a [private endpoint](../private-link/private-endpoint-overview.md) in your virtual network. Traffic between your virtual network and Event Grid travels the Microsoft backbone network.
157157

0 commit comments

Comments
 (0)