Skip to content

Commit 425aed0

Browse files
Merge pull request #259729 from rolyon/rolyon-abac-constrained-delegation-video-link-update
[Azure ABAC] Delegate role assignments with conditions video update
2 parents abfdcfb + 21fcd07 commit 425aed0

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

articles/role-based-access-control/delegate-role-assignments-overview.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ ms.service: role-based-access-control
88
ms.subservice: conditions
99
ms.topic: conceptual
1010
ms.workload: identity
11-
ms.date: 09/20/2023
11+
ms.date: 11/28/2023
1212
ms.author: rolyon
1313

1414
#Customer intent: As a dev, devops, or it admin, I want to delegate the Azure role assignment task to other users who are closer to the decision, but want to limit the scope of the role assignments.
@@ -60,7 +60,9 @@ Instead of assigning the Owner or User Access Administrator roles, a more secure
6060
6161
Delegating role assignments with conditions is a way to restrict the role assignments a user can create. In the preceding example, Alice can allow Dara to create some role assignments on her behalf, but not all role assignments. For example, Alice can constrain the roles that Dara can assign and constrain the principals that Dara can assign roles to. This delegation with conditions is sometimes referred to as *constrained delegation* and is implemented with [Azure attribute-based access control (Azure ABAC) conditions](conditions-overview.md).
6262

63-
To watch an overview video, see [Delegate Azure role assignments with conditions](https://youtu.be/3eDf2thqeO4?si=rBPW9BxRNtISkAGG).
63+
This video provides an overview of delegating role assignments with conditions.
64+
65+
>[!VIDEO https://www.youtube.com/embed/3eDf2thqeO4]
6466
6567
## Why delegate role assignments with conditions?
6668

0 commit comments

Comments
 (0)