Skip to content

Commit 5b4b694

Browse files
committed
Learn Editor: Update how-to-setup-rbac.md
1 parent 7473475 commit 5b4b694

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

articles/cosmos-db/how-to-setup-rbac.md

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -454,7 +454,14 @@ When constructing the [REST API authorization header](/rest/api/cosmos-db/access
454454
> [!NOTE]
455455
> As of July 2024, the Data Explorer exposed in the Azure portal does support Azure Cosmos DB role-based access control. The Azure Cosmos DB Explorer at [https://cosmos.azure.com](https://cosmos.azure.com) also supports this without the need to specify a query parameter. The previous method of using `https://cosmos.azure.com/?feature.enableAadDataPlane=true` to enable this functionality is still honored and will force the use of Microsoft Entra identity for your data requests.
456456
457-
Azure Cosmos DB role-based access control within Data Explorer (either within the Azure Portal or at [https://cosmos.azure.com](https://cosmos.azure.com)
457+
The use of Azure Cosmos DB role-based access control within Data Explorer (either exposed in the Azure Portal or at [https://cosmos.azure.com] (https://cosmos.azure.com)) is governed by the **Enable Entra ID RBAC** setting. You can access this setting via the "wheel" icon at the right-hand side of the Data Explorer interface.
458+
459+
The setting has three possible values:
460+
- **Automatic (default)**: In this mode, role-based access control will be automatically used if the account has [disabled the use of keys] (#disable-local-auth). Otherwise, Data Explorer will use account keys for data requests.
461+
462+
- **True**: In this mode, role-based access will always be used for Data Explorer data requests. If the account has not been enabled for role-based access , then the requests will fail.
463+
464+
- **False**: In this mode, account keys will always be used for Data Explorer data requests. If the account has disabled the use of keys, then the requests will fail.
458465

459466

460467

0 commit comments

Comments
 (0)