Skip to content

Commit 3ca0748

Browse files
committed
remove references to premium sku from using tokens and scope maps
1 parent 7639402 commit 3ca0748

File tree

1 file changed

+6
-9
lines changed

1 file changed

+6
-9
lines changed

articles/container-registry/container-registry-repository-scoped-permissions.md

Lines changed: 6 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: Permissions to repositories in Azure Container Registry
3-
description: Create a token with permissions scoped to specific repositories in a Premium registry to pull or push images, or perform other actions
3+
description: Create a token with permissions scoped to specific repositories in a registry to pull or push images, or perform other actions
44
ms.topic: article
55
author: tejaswikolli-web
66
ms.author: tejaswikolli
@@ -11,24 +11,21 @@ ms.devlang: azurecli
1111

1212
# Create a token with repository-scoped permissions
1313

14-
This article describes how to create tokens and scope maps to manage access to specific repositories in your container registry. By creating tokens, a registry owner can provide users or services with scoped, time-limited access to repositories to pull or push images or perform other actions. A token provides more fine-grained permissions than other registry [authentication options](container-registry-authentication.md), which scope permissions to an entire registry.
14+
This article describes how to create tokens and scope maps to manage access to specific repositories in your container registry. By creating tokens, a registry owner can provide users or services with scoped, time-limited access to repositories to pull or push images or perform other actions. A token provides more fine-grained permissions than other registry [authentication options](container-registry-authentication.md), which scope permissions to an entire registry.
1515

1616
Scenarios for creating a token include:
1717

1818
* Allow IoT devices with individual tokens to pull an image from a repository
1919
* Provide an external organization with permissions to a specific repository
2020
* Limit repository access to different user groups in your organization. For example, provide write and read access to developers who build images that target specific repositories, and read access to teams that deploy from those repositories.
2121

22-
This feature is available in the **Premium** container registry service tier. For information about registry service tiers and limits, see [Azure Container Registry service tiers](container-registry-skus.md).
23-
2422
## Limitations
2523

2624
* You can't currently assign repository-scoped permissions to an Azure Active Directory identity, such as a service principal or managed identity.
2725

28-
2926
## Concepts
3027

31-
To configure repository-scoped permissions, you create a *token* with an associated *scope map*.
28+
To configure repository-scoped permissions, you create a *token* with an associated *scope map*.
3229

3330
* A **token** along with a generated password lets the user authenticate with the registry. You can set an expiration date for a token password, or disable a token at any time.
3431

@@ -46,8 +43,8 @@ To configure repository-scoped permissions, you create a *token* with an associa
4643

4744
With a scope map:
4845

49-
* Configure multiple tokens with identical permissions to a set of repositories
50-
* Update token permissions when you add or remove repository actions in the scope map, or apply a different scope map
46+
* Configure multiple tokens with identical permissions to a set of repositories
47+
* Update token permissions when you add or remove repository actions in the scope map, or apply a different scope map
5148

5249
Azure Container Registry also provides several system-defined scope maps you can apply when creating tokens. The permissions of system-defined scope maps apply to all repositories in your registry.The individual *actions* corresponds to the limit of [Repositories per scope map.](container-registry-skus.md)
5350

@@ -59,7 +56,7 @@ The following image shows the relationship between tokens and scope maps.
5956

6057
* **Azure CLI** - Azure CLI command examples in this article require Azure CLI version 2.17.0 or later. Run `az --version` to find the version. If you need to install or upgrade, see [Install Azure CLI](/cli/azure/install-azure-cli).
6158
* **Docker** - To authenticate with the registry to pull or push images, you need a local Docker installation. Docker provides installation instructions for [macOS](https://docs.docker.com/docker-for-mac/), [Windows](https://docs.docker.com/docker-for-windows/), and [Linux](https://docs.docker.com/engine/installation/#supported-platforms) systems.
62-
* **Container registry** - If you don't have one, create a Premium container registry in your Azure subscription, or upgrade an existing registry. For example, use the [Azure portal](container-registry-get-started-portal.md) or the [Azure CLI](container-registry-get-started-azure-cli.md).
59+
* **Container registry** - If you don't have one, create a container registry in your Azure subscription. For example, use the [Azure portal](container-registry-get-started-portal.md) or the [Azure CLI](container-registry-get-started-azure-cli.md).
6360

6461
## Create token - CLI
6562

0 commit comments

Comments
 (0)