Skip to content

Commit 38db722

Browse files
committed
few more touchups
1 parent e4476fd commit 38db722

File tree

5 files changed

+25
-24
lines changed

5 files changed

+25
-24
lines changed

articles/devtest-labs/add-artifact-vm.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to add or configure artifacts on lab virtual machines (VM
44
ms.topic: how-to
55
ms.author: rosemalcolm
66
author: RoseHJM
7-
ms.date: 03/24/2025
7+
ms.date: 03/25/2025
88
ms.custom: devx-track-azurepowershell, UpdateFrequency2
99

1010
#customer intent: As a lab user, I want to add artifacts to my VMs so I can use them to run scripts or commands, install tools or applications, or take other actions on my VMs.

articles/devtest-labs/connect-virtual-machine-through-browser.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to connect to Azure DevTest Labs virtual machines (VMs) t
44
ms.topic: how-to
55
ms.author: rosemalcolm
66
author: RoseHJM
7-
ms.date: 03/24/2023
7+
ms.date: 03/25/2023
88
ms.custom: UpdateFrequency2
99

1010
#customer intent: As a lab user, I want to connect to Bastion-enabled lab VMs through my browser, so I can connect securely without using public IP addresses or exposing RDP or SSH ports to the internet.

articles/devtest-labs/devtest-lab-add-devtest-user.md

Lines changed: 14 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -4,39 +4,39 @@ description: Learn about the Azure DevTest Labs Owner, Contributor, and DevTest
44
ms.topic: how-to
55
ms.author: rosemalcolm
66
author: RoseHJM
7-
ms.date: 03/24/2025
7+
ms.date: 03/25/2025
88
ms.custom: devx-track-azurepowershell, UpdateFrequency2
99

1010
#customer intent: As a lab owner, I want to add and configure users for my lab so I can grant the access necessary to do specific lab tasks.
1111
---
1212

1313
# Add and configure lab users in Azure DevTest Labs
1414

15-
Azure DevTest Labs uses Azure [role-based access control](/azure/role-based-access-control/overview) (RBAC) to define roles that have the access necessary to do specific lab tasks. DevTest Labs has three built-in roles: **Owner**, **Contributor**, and **DevTest Labs User**. This article describes the tasks each role can do, and how lab owners can add members to lab roles by using the Azure portal or an Azure PowerShell script.
15+
Azure DevTest Labs has three built-in roles: **Owner**, **Contributor**, and **DevTest Labs User**, that use Azure [role-based access control](/azure/role-based-access-control/overview) (RBAC) to define the access necessary to do specific lab tasks. This article lists the tasks each role can do, and describes how Lab Owners can add members to lab roles by using the Azure portal or an Azure PowerShell script.
1616

1717
<a name="devtest-labs-user"></a>
1818
## Owners, Contributors, and DevTest Labs Users
1919

20-
The following table shows the actions that the DevTest Labs Owner, Contributor, and DevTest Labs User roles can take.
20+
The following table shows the actions that the DevTest Labs **Owner**, **Contributor**, and **DevTest Labs User** roles can take.
2121

2222
|Action|Owner|Contributor|DevTest Labs User|
2323
|------|-----|-----------|----------------|
24-
|**Lab tasks:**||||
24+
|**Lab tasks**||||
2525
|Create labs.|X|X||
2626
|Add users to labs.|X|||
2727
|Configure user settings and roles.|X|||
2828
|Update lab virtual machine (VM) policies.|X|X||
2929
|Update cost settings.|X|X||
30-
|**VM base tasks:**||||
30+
|**VM base tasks**||||
3131
|Enable Marketplace images.|X|X||
3232
|Add, update, and delete VM base formulas.|X|X|X|
3333
|Add and remove custom images.|X|X||
3434
|Add, update, and delete formulas.|X|X||
35-
|**Individual VM tasks:**||||
35+
|**Individual VM tasks**||||
3636
|Create VMs.|X|X|X|
3737
|Start, stop, or delete owned VMs.|X|X|X|
3838
|Add or remove VM data disks.|X|X|X|
39-
|**Artifact and template tasks:**||||
39+
|**Artifact and template tasks**||||
4040
|Add and remove lab artifact and template repositories.|X|X||
4141
|Create artifacts and templates.|X|X|X|
4242
|Apply artifacts to owned VMs.|X|X|X|
@@ -46,11 +46,11 @@ The following table shows the actions that the DevTest Labs Owner, Contributor,
4646
4747
### Required permissions
4848

49-
Azure permissions propagate from parent scope to child scope. Owners of an Azure subscription that contains labs are automatically Owners of the subscription's labs.
49+
Azure permissions propagate from parent scope to child scope. Owners of an Azure subscription that contains labs are automatically owners of the subscription's labs.
5050

51-
Azure subscription [Owners](/azure/role-based-access-control/built-in-roles#owner) or [User Access Administrators](/azure/role-based-access-control/built-in-roles#user-access-administrator) can add Owners, Contributors, and DevTest Labs Users to labs in the subscription. To be added as a lab Owner, users must have at least Contributor-level permissions in the Azure subscription.
51+
Azure subscription [Owners](/azure/role-based-access-control/built-in-roles#owner) and [User Access Administrators](/azure/role-based-access-control/built-in-roles#user-access-administrator) can add DevTest Labs **Owner**s, **Contributor**s, and **DevTest Labs Users** to labs in the subscription.
5252

53-
Users that are granted the lab Owner role can add and configure Owners, Contributors, and DevTest Labs Users for their own labs. However, added lab Owners have a narrower scope of administration than Azure subscription-based Owners. Added Owners don't have full access to some resources that the DevTest Labs service creates.
53+
Users that are granted the lab **Owner** role can add and configure **Owner**s, **Contributor**s, and **DevTest Labs User**s for their own labs. However, added lab owners have a narrower scope of administration than Azure subscription-based owners. Added owners don't have full access to some resources that the DevTest Labs service creates.
5454

5555
DevTest Labs Users must have a valid [Microsoft account](/windows-server/identity/ad-ds/manage/understand-microsoft-accounts), but they don't need an Azure subscription.
5656

@@ -66,7 +66,7 @@ Lab Owners can add members to lab roles by using the Azure portal or an Azure Po
6666

6767
### Add a lab member
6868

69-
The following procedure adds a **DevTest Labs User** member to a lab. If you're an Owner of the Azure subscription the lab is in, you can also do this procedure from the subscription's **Access control (IAM)** page.
69+
The following procedure adds a **DevTest Labs User** member to a lab. If you're an owner of the Azure subscription the lab is in, you can also do this procedure from the subscription's **Access control (IAM)** page.
7070

7171
1. On the lab's home page, select **Configuration and policies** from the left navigation.
7272
1. On the **Configuration and policies** page, select **Access control (IAM)** from the left navigation.
@@ -89,10 +89,11 @@ The following procedure adds a **DevTest Labs User** member to a lab. If you're
8989

9090
- Lab **Owner** role, either by assignment from a subscription owner or by inheritance as a subscription owner.
9191
- Azure PowerShell. You can either:
92-
- [Use the Azure Cloud Shell PowerShell environment](/azure/cloud-shell/quickstart).
92+
- [Use Azure Cloud Shell](/azure/cloud-shell/quickstart). Be sure to select the **PowerShell** environment in Cloud Shell.
9393
- [Install Azure PowerShell](/powershell/azure/install-azure-powershell) to use on a physical or virtual machine. If necessary, run `Update-Module -Name Az` to update your installation.
9494

95-
This PowerShell script requires the added user to be in the Microsoft Entra ID. You can add an external user to Microsoft Entra ID as a guest. For more information, see [Add a new guest user](/entra/fundamentals/how-to-create-delete-users#invite-an-external-user). If you can't add the user to Microsoft Entra ID, use the portal procedure instead.
95+
>[!NOTE]
96+
>This PowerShell script requires the added user to be in the Microsoft Entra ID. You can add an external user to Microsoft Entra ID as a guest. For more information, see [Add a new guest user](/entra/fundamentals/how-to-create-delete-users#invite-an-external-user). If you can't add the user to Microsoft Entra ID, use the portal procedure instead.
9697
9798
### Add a member
9899

articles/devtest-labs/enable-browser-connection-lab-virtual-machines.md

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to integrate Azure Bastion with DevTest Labs to enable ac
44
ms.topic: how-to
55
ms.author: rosemalcolm
66
author: RoseHJM
7-
ms.date: 03/24/2025
7+
ms.date: 03/25/2025
88
ms.custom: UpdateFrequency2
99

1010
#customer intent: As a lab owner, I want to enable Azure Bastion for my lab virtual network so lab users can connect to their VMs through their browsers.
@@ -18,19 +18,19 @@ Azure Bastion provides secure and seamless remote desktop protocol (RDP) and sec
1818

1919
This article covers two ways to enable Azure Bastion browser connectivity to DevTest Labs VMs:
2020

21-
- [Create a new Azure Bastion-enabled virtual network for your lab](#option-1-create-a-new-azure-bastion-enabled-virtual-network). In this option, you add a new subnet for creating VMs.
22-
- [Deploy Azure Bastion in your existing lab virtual network](#option-2-deploy-azure-bastion-in-the-existing-lab-virtual-network). This option is suitable for labs where the lab VMs already exist.
21+
- [Create a new Azure Bastion-enabled virtual network for your lab](#option-1-create-a-new-azure-bastion-enabled-virtual-network)
22+
- [Deploy Azure Bastion in your existing lab virtual network](#option-2-deploy-azure-bastion-in-the-existing-lab-virtual-network)
2323

2424
## Prerequisites
2525

26-
- To enable and configure Azure Bastion for a lab, you need at least **Contributor**-level permissions in the Azure subscription the lab is in, and **Owner** or **Contributor** role in the lab.
27-
- To connect to an Azure Bastion-enabled lab virtual machine (VM) through a browser, you need at least **DevTest Labs User** role in the lab and sign-in access to the VM.
26+
- To enable and configure Azure Bastion for a lab, you need **Owner** or **Contributor** role in the lab.
27+
- To connect to an Azure Bastion-enabled lab virtual machine (VM) through a browser, you need **DevTest Labs User** role in the lab and sign-in access to the VM.
2828

2929
For more information about DevTest Labs user roles and access, see [Add and configure lab users](devtest-lab-add-devtest-user.md).
3030

3131
## Option 1: Create a new Azure Bastion-enabled virtual network
3232

33-
You can create a new virtual network for your lab with an Azure Bastion subnet and another subnet in it. An Azure Bastion subnet allows only Bastion resources in it, so you need another subnet for creating lab VMs.
33+
You can create a new virtual network for your lab with an Azure Bastion subnet and another subnet in it. An Azure Bastion subnet allows only Bastion resources in it, so you use the other subnet for creating lab VMs.
3434

3535
1. In the Azure portal, search for and select **virtual networks**.
3636
1. Select **Create** at the top of the **Virtual networks** page.
@@ -41,7 +41,7 @@ You can create a new virtual network for your lab with an Azure Bastion subnet a
4141
:::image type="content" source="media/enable-browser-connection-lab-virtual-machines/create-bastion.png" alt-text="Screenshot that shows enabling Azure Bastion on the Security page.":::
4242

4343
1. Select **Next** or the **IP Addresses** tab.
44-
1. On the **IP Addresses** page, ensure there are two subnets named **default** and **AzureBastionSubnet**, and configure or add IP address ranges if desired.
44+
1. On the **IP Addresses** page, ensure there are two subnets named **default** and **AzureBastionSubnet**, and configure IP address ranges if necessary.
4545

4646
:::image type="content" source="media/enable-browser-connection-lab-virtual-machines/create-subnet.png" alt-text="Screenshot that shows creating the AzureBastionSubnet subnet.":::
4747

@@ -66,7 +66,7 @@ Follow these instructions to connect your lab to the new Azure Bastion-enabled v
6666

6767
### Enable VM creation in the default subnet
6868

69-
Follow these instructions to enable VM creation in the default subnet.
69+
Follow these instructions to enable VM creation in the default subnet of the new virtual network.
7070

7171
1. On the **Virtual networks** page, select the Azure Bastion-enabled virtual network.
7272
1. On the **Virtual network** page, make sure that both the **AzureBastionSubnet** subnet and the **default** subnet appear, and select the **default** subnet.
@@ -76,7 +76,7 @@ Follow these instructions to enable VM creation in the default subnet.
7676

7777
## Option 2: Deploy Azure Bastion in the existing lab virtual network
7878

79-
You can enable browser connects to existing lab VMs by creating a new Azure Bastion subnet in your lab's existing virtual network.
79+
You can enable browser connections to existing lab VMs by creating a new Azure Bastion subnet in your lab's existing virtual network.
8080

8181
1. On your lab **Overview** page, select **Configuration and policies** from the left navigation.
8282
1. On the **Configuration and policies** page, select **Virtual networks** under **Settings** in the left navigation.
-7.06 KB
Loading

0 commit comments

Comments
 (0)