You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When you create the first user subscription mode Batch account in an Azure subscription, you must register your subscription with Batch and assign **Azure Batch Service Orchestration Role** to Batch. You need to do this registration only once per subscription.
101
+
When you create the first user subscription mode Batch account in an Azure subscription, you must register your subscription with Batch resource provider, and assign **Azure Batch Service Orchestration Role** to Microsoft Azure Batch service principle. You need to do this configuration only once per subscription.
102
102
103
103
> [!IMPORTANT]
104
104
> You need **Owner** permissions in the subscription to take this action.
@@ -160,17 +160,18 @@ To create a Batch account with authentication mode settings:
160
160
To grant access to the key vault manually in [Azure portal](https://portal.azure.com), you need to assign **Key Vault Secrets Officer** role for Batch:
161
161
162
162
1. Select **Access control (IAM)** from the left navigation of the key vault page.
163
-
2. At the top of the **Access control (IAM)** page, select **Add** > **Add role assignment**.
164
-
3. On the **Add role assignment** screen, under **Role** tab, under **Job function roles** sub tab, search and select **Key Vault Secrets Officer** role for the Batch account, and then select **Next**.
165
-
4. On the **Members** tab, select **Select members**. On the **Select members** screen, search for and select **Microsoft Azure Batch**, and then select **Select**.
166
-
5. Select the **Review + create** button on the bottom to go to **Review + assign** tab, and select the **Review + create** button on the bottom again.
163
+
1. At the top of the **Access control (IAM)** page, select **Add** > **Add role assignment**.
164
+
1. On the **Add role assignment** screen, under **Role** tab, under **Job function roles** sub tab, search and select **Key Vault Secrets Officer** role for the Batch account, and then select **Next**.
165
+
1. On the **Members** tab, select **Select members**. On the **Select members** screen, search for and select **Microsoft Azure Batch**, and then select **Select**.
166
+
1. Select the **Review + create** button on the bottom to go to **Review + assign** tab, and select the **Review + create** button on the bottom again.
167
+
168
+
For detailed steps, see [Assign Azure roles by using the Azure portal](../role-based-access-control/role-assignments-portal.yml).
167
169
168
170
> [!NOTE]
169
-
> If the RBAC role is not assigned for Batch in the key vault, you will get **KeyVaultNotFound** error when creating Batch account with that key vault.
171
+
> **KeyVaultNotFound** error returns for Batch account creation if the RBAC role isn't assigned for Batch in the referenced key vault.
170
172
171
-
For detailed steps, see [Assign Azure roles by using the Azure portal](../role-based-access-control/role-assignments-portal.yml).
172
173
173
-
If the Key Vault permission model is **Vault access policy**, you need to also configure the **Access policies**:
174
+
If the Key Vault permission model is **Vault access policy**, you also need to configure the **Access policies**:
174
175
175
176
1. Select **Access policies** from the left navigation of the key vault page.
176
177
1. On the **Access policies** page, select **Create**.
@@ -184,7 +185,7 @@ If the Key Vault permission model is **Vault access policy**, you need to also c
184
185
185
186
### Configure subscription quotas
186
187
187
-
For user subscription Batch accounts, [core quotas](batch-quota-limit.md) must be set manually. Standard Batch core quotas don't apply to accounts in user subscription mode. The [quotas in your subscription](/azure/azure-resource-manager/management/azure-subscription-service-limits) for regional compute cores, per-series compute cores, and other resources are used and enforced.
188
+
For user subscription Batch accounts, [core quotas](batch-quota-limit.md) must be set manually. Standard Batch core quotas don't apply to accounts in user subscription mode. The [quotas in your subscription](/azure/azure-resource-manager/management/azure-subscription-service-limits) for regional compute cores, per-series compute cores, and other resources are used to and enforced.
188
189
189
190
To view and configure the core quotas associated with your Batch account:
0 commit comments