You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
#customer intent: As a lab user, I want to add artifacts to my VMs so I can use them to run scripts or commands, install tools or applications, or take other actions on my VMs.
Copy file name to clipboardExpand all lines: articles/devtest-labs/connect-virtual-machine-through-browser.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ description: Learn how to connect to Azure DevTest Labs virtual machines (VMs) t
4
4
ms.topic: how-to
5
5
ms.author: rosemalcolm
6
6
author: RoseHJM
7
-
ms.date: 03/24/2023
7
+
ms.date: 03/25/2023
8
8
ms.custom: UpdateFrequency2
9
9
10
10
#customer intent: As a lab user, I want to connect to Bastion-enabled lab VMs through my browser, so I can connect securely without using public IP addresses or exposing RDP or SSH ports to the internet.
#customer intent: As a lab owner, I want to add and configure users for my lab so I can grant the access necessary to do specific lab tasks.
11
11
---
12
12
13
13
# Add and configure lab users in Azure DevTest Labs
14
14
15
-
Azure DevTest Labs uses Azure [role-based access control](/azure/role-based-access-control/overview) (RBAC) to define roles that have the access necessary to do specific lab tasks. DevTest Labs has three built-in roles: **Owner**, **Contributor**, and **DevTest Labs User**. This article describes the tasks each role can do, and how lab owners can add members to lab roles by using the Azure portal or an Azure PowerShell script.
15
+
Azure DevTest Labs has three built-in roles: **Owner**, **Contributor**, and **DevTest Labs User**, that use Azure [role-based access control](/azure/role-based-access-control/overview) (RBAC) to define the access necessary to do specific lab tasks. This article lists the tasks each role can do, and describes how Lab Owners can add members to lab roles by using the Azure portal or an Azure PowerShell script.
16
16
17
17
<aname="devtest-labs-user"></a>
18
18
## Owners, Contributors, and DevTest Labs Users
19
19
20
-
The following table shows the actions that the DevTest Labs Owner, Contributor, and DevTest Labs User roles can take.
20
+
The following table shows the actions that the DevTest Labs **Owner**, **Contributor**, and **DevTest Labs User** roles can take.
21
21
22
22
|Action|Owner|Contributor|DevTest Labs User|
23
23
|------|-----|-----------|----------------|
24
-
|**Lab tasks:**||||
24
+
|**Lab tasks**||||
25
25
|Create labs.|X|X||
26
26
|Add users to labs.|X|||
27
27
|Configure user settings and roles.|X|||
28
28
|Update lab virtual machine (VM) policies.|X|X||
29
29
|Update cost settings.|X|X||
30
-
|**VM base tasks:**||||
30
+
|**VM base tasks**||||
31
31
|Enable Marketplace images.|X|X||
32
32
|Add, update, and delete VM base formulas.|X|X|X|
33
33
|Add and remove custom images.|X|X||
34
34
|Add, update, and delete formulas.|X|X||
35
-
|**Individual VM tasks:**||||
35
+
|**Individual VM tasks**||||
36
36
|Create VMs.|X|X|X|
37
37
|Start, stop, or delete owned VMs.|X|X|X|
38
38
|Add or remove VM data disks.|X|X|X|
39
-
|**Artifact and template tasks:**||||
39
+
|**Artifact and template tasks**||||
40
40
|Add and remove lab artifact and template repositories.|X|X||
41
41
|Create artifacts and templates.|X|X|X|
42
42
|Apply artifacts to owned VMs.|X|X|X|
@@ -46,11 +46,11 @@ The following table shows the actions that the DevTest Labs Owner, Contributor,
46
46
47
47
### Required permissions
48
48
49
-
Azure permissions propagate from parent scope to child scope. Owners of an Azure subscription that contains labs are automatically Owners of the subscription's labs.
49
+
Azure permissions propagate from parent scope to child scope. Owners of an Azure subscription that contains labs are automatically owners of the subscription's labs.
50
50
51
-
Azure subscription [Owners](/azure/role-based-access-control/built-in-roles#owner)or[User Access Administrators](/azure/role-based-access-control/built-in-roles#user-access-administrator) can add Owners, Contributors, and DevTest Labs Users to labs in the subscription. To be added as a lab Owner, users must have at least Contributor-level permissions in the Azure subscription.
51
+
Azure subscription [Owners](/azure/role-based-access-control/built-in-roles#owner)and[User Access Administrators](/azure/role-based-access-control/built-in-roles#user-access-administrator) can add DevTest Labs **Owner**s, **Contributor**s, and **DevTest Labs Users** to labs in the subscription.
52
52
53
-
Users that are granted the lab Owner role can add and configure Owners, Contributors, and DevTest Labs Users for their own labs. However, added lab Owners have a narrower scope of administration than Azure subscription-based Owners. Added Owners don't have full access to some resources that the DevTest Labs service creates.
53
+
Users that are granted the lab **Owner** role can add and configure **Owner**s, **Contributor**s, and **DevTest Labs User**s for their own labs. However, added lab owners have a narrower scope of administration than Azure subscription-based owners. Added owners don't have full access to some resources that the DevTest Labs service creates.
54
54
55
55
DevTest Labs Users must have a valid [Microsoft account](/windows-server/identity/ad-ds/manage/understand-microsoft-accounts), but they don't need an Azure subscription.
56
56
@@ -66,7 +66,7 @@ Lab Owners can add members to lab roles by using the Azure portal or an Azure Po
66
66
67
67
### Add a lab member
68
68
69
-
The following procedure adds a **DevTest Labs User** member to a lab. If you're an Owner of the Azure subscription the lab is in, you can also do this procedure from the subscription's **Access control (IAM)** page.
69
+
The following procedure adds a **DevTest Labs User** member to a lab. If you're an owner of the Azure subscription the lab is in, you can also do this procedure from the subscription's **Access control (IAM)** page.
70
70
71
71
1. On the lab's home page, select **Configuration and policies** from the left navigation.
72
72
1. On the **Configuration and policies** page, select **Access control (IAM)** from the left navigation.
@@ -89,10 +89,11 @@ The following procedure adds a **DevTest Labs User** member to a lab. If you're
89
89
90
90
- Lab **Owner** role, either by assignment from a subscription owner or by inheritance as a subscription owner.
91
91
- Azure PowerShell. You can either:
92
-
-[Use the Azure Cloud Shell PowerShell environment](/azure/cloud-shell/quickstart).
92
+
-[Use Azure Cloud Shell](/azure/cloud-shell/quickstart). Be sure to select the **PowerShell** environment in Cloud Shell.
93
93
-[Install Azure PowerShell](/powershell/azure/install-azure-powershell) to use on a physical or virtual machine. If necessary, run `Update-Module -Name Az` to update your installation.
94
94
95
-
This PowerShell script requires the added user to be in the Microsoft Entra ID. You can add an external user to Microsoft Entra ID as a guest. For more information, see [Add a new guest user](/entra/fundamentals/how-to-create-delete-users#invite-an-external-user). If you can't add the user to Microsoft Entra ID, use the portal procedure instead.
95
+
>[!NOTE]
96
+
>This PowerShell script requires the added user to be in the Microsoft Entra ID. You can add an external user to Microsoft Entra ID as a guest. For more information, see [Add a new guest user](/entra/fundamentals/how-to-create-delete-users#invite-an-external-user). If you can't add the user to Microsoft Entra ID, use the portal procedure instead.
Copy file name to clipboardExpand all lines: articles/devtest-labs/enable-browser-connection-lab-virtual-machines.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -4,7 +4,7 @@ description: Learn how to integrate Azure Bastion with DevTest Labs to enable ac
4
4
ms.topic: how-to
5
5
ms.author: rosemalcolm
6
6
author: RoseHJM
7
-
ms.date: 03/24/2025
7
+
ms.date: 03/25/2025
8
8
ms.custom: UpdateFrequency2
9
9
10
10
#customer intent: As a lab owner, I want to enable Azure Bastion for my lab virtual network so lab users can connect to their VMs through their browsers.
@@ -18,19 +18,19 @@ Azure Bastion provides secure and seamless remote desktop protocol (RDP) and sec
18
18
19
19
This article covers two ways to enable Azure Bastion browser connectivity to DevTest Labs VMs:
20
20
21
-
-[Create a new Azure Bastion-enabled virtual network for your lab](#option-1-create-a-new-azure-bastion-enabled-virtual-network). In this option, you add a new subnet for creating VMs.
22
-
-[Deploy Azure Bastion in your existing lab virtual network](#option-2-deploy-azure-bastion-in-the-existing-lab-virtual-network). This option is suitable for labs where the lab VMs already exist.
21
+
-[Create a new Azure Bastion-enabled virtual network for your lab](#option-1-create-a-new-azure-bastion-enabled-virtual-network)
22
+
-[Deploy Azure Bastion in your existing lab virtual network](#option-2-deploy-azure-bastion-in-the-existing-lab-virtual-network)
23
23
24
24
## Prerequisites
25
25
26
-
- To enable and configure Azure Bastion for a lab, you need at least **Contributor**-level permissions in the Azure subscription the lab is in, and **Owner** or **Contributor** role in the lab.
27
-
- To connect to an Azure Bastion-enabled lab virtual machine (VM) through a browser, you need at least **DevTest Labs User** role in the lab and sign-in access to the VM.
26
+
- To enable and configure Azure Bastion for a lab, you need **Owner** or **Contributor** role in the lab.
27
+
- To connect to an Azure Bastion-enabled lab virtual machine (VM) through a browser, you need **DevTest Labs User** role in the lab and sign-in access to the VM.
28
28
29
29
For more information about DevTest Labs user roles and access, see [Add and configure lab users](devtest-lab-add-devtest-user.md).
30
30
31
31
## Option 1: Create a new Azure Bastion-enabled virtual network
32
32
33
-
You can create a new virtual network for your lab with an Azure Bastion subnet and another subnet in it. An Azure Bastion subnet allows only Bastion resources in it, so you need another subnet for creating lab VMs.
33
+
You can create a new virtual network for your lab with an Azure Bastion subnet and another subnet in it. An Azure Bastion subnet allows only Bastion resources in it, so you use the other subnet for creating lab VMs.
34
34
35
35
1. In the Azure portal, search for and select **virtual networks**.
36
36
1. Select **Create** at the top of the **Virtual networks** page.
@@ -41,7 +41,7 @@ You can create a new virtual network for your lab with an Azure Bastion subnet a
41
41
:::image type="content" source="media/enable-browser-connection-lab-virtual-machines/create-bastion.png" alt-text="Screenshot that shows enabling Azure Bastion on the Security page.":::
42
42
43
43
1. Select **Next** or the **IP Addresses** tab.
44
-
1. On the **IP Addresses** page, ensure there are two subnets named **default** and **AzureBastionSubnet**, and configure or add IP address ranges if desired.
44
+
1. On the **IP Addresses** page, ensure there are two subnets named **default** and **AzureBastionSubnet**, and configure IP address ranges if necessary.
45
45
46
46
:::image type="content" source="media/enable-browser-connection-lab-virtual-machines/create-subnet.png" alt-text="Screenshot that shows creating the AzureBastionSubnet subnet.":::
47
47
@@ -66,7 +66,7 @@ Follow these instructions to connect your lab to the new Azure Bastion-enabled v
66
66
67
67
### Enable VM creation in the default subnet
68
68
69
-
Follow these instructions to enable VM creation in the default subnet.
69
+
Follow these instructions to enable VM creation in the default subnet of the new virtual network.
70
70
71
71
1. On the **Virtual networks** page, select the Azure Bastion-enabled virtual network.
72
72
1. On the **Virtual network** page, make sure that both the **AzureBastionSubnet** subnet and the **default** subnet appear, and select the **default** subnet.
@@ -76,7 +76,7 @@ Follow these instructions to enable VM creation in the default subnet.
76
76
77
77
## Option 2: Deploy Azure Bastion in the existing lab virtual network
78
78
79
-
You can enable browser connects to existing lab VMs by creating a new Azure Bastion subnet in your lab's existing virtual network.
79
+
You can enable browser connections to existing lab VMs by creating a new Azure Bastion subnet in your lab's existing virtual network.
80
80
81
81
1. On your lab **Overview** page, select **Configuration and policies** from the left navigation.
82
82
1. On the **Configuration and policies** page, select **Virtual networks** under **Settings** in the left navigation.
0 commit comments