You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/virtual-desktop/rbac.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -13,15 +13,15 @@ manager: femila
13
13
14
14
Azure Virtual Desktop uses Azure role-based access control (RBAC) to control access to resources. There are a number of built-in roles for use with Azure Virtual Desktop which is a collection of permissions. You assign roles to users and admins and these roles give permission to carry out certain tasks. To learn more about Azure RBAC, see [What is Azure RBAC?](../role-based-access-control/overview.md).
15
15
16
-
The standard built-in roles for Azure are Owner, Contributor, and Reader. However, Azure Virtual Desktop has additional roles that let you separate management roles for host pools, app groups, and workspaces. This separation lets you have more granular control over administrative tasks. These roles are named in compliance with Azure's standard roles and least-privilege methodology.
16
+
The standard built-in roles for Azure are Owner, Contributor, and Reader. However, Azure Virtual Desktop has additional roles that let you separate management roles for host pools, application groups, and workspaces. This separation lets you have more granular control over administrative tasks. These roles are named in compliance with Azure's standard roles and least-privilege methodology.
17
17
18
18
Azure Virtual Desktop doesn't have a specific Owner role. However, you can use the general Owner role for the service objects.
19
19
20
20
The built-in roles for Azure Virtual Desktop and the permissions for each one are detailed below. The assignable scope for all built-in roles are set to the root scope ("/"). The root scope indicates that the role is available for assignment in all scopes, for example management groups, subscriptions, or resource groups. For more information, see [Understand Azure role definitions](../role-based-access-control/role-definitions.md).
21
21
22
22
## Desktop Virtualization Contributor
23
23
24
-
The Desktop Virtualization Contributor role allows you to manage all aspects of the deployment. However, it doesn't grant you access to compute resources. You'll also need the User Access Administrator role to publish app groups to users or user groups.
24
+
The Desktop Virtualization Contributor role allows you to manage all aspects of the deployment. However, it doesn't grant you access to compute resources. You'll also need the User Access Administrator role to publish application groups to users or user groups.
25
25
26
26
| Action type | Permissions |
27
27
|--|--|
@@ -76,7 +76,7 @@ The Host Pool Reader role allows you to view everything in the host pool, but wo
76
76
77
77
## Desktop Virtualization Application Group Contributor
78
78
79
-
The Application Group Contributor role allows you to manage all aspects of app groups. If you want to publish app groups to users or user groups, you'll need the User Access Administrator role.
79
+
The Application Group Contributor role allows you to manage all aspects of application groups. If you want to publish application groups to users or user groups, you'll need the User Access Administrator role.
80
80
81
81
The following table describes which permissions this role can access:
82
82
@@ -100,7 +100,7 @@ The Application Group Reader role allows you to view everything in the app group
100
100
101
101
## Desktop Virtualization Workspace Contributor
102
102
103
-
The Workspace Contributor role allows you to manage all aspects of workspaces. To get information on applications added to the app groups, you'll also need to be assigned the Application Group Reader role.
103
+
The Workspace Contributor role allows you to manage all aspects of workspaces. To get information on applications added to the application groups, you'll also need to be assigned the Application Group Reader role.
0 commit comments