You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Add note to remind those who depends on Azure portal that the role is not directly viewable via Azure portal (recommend to use CLI).
Fix the links which are not jumping to the section of the page due to false anchor usage.
Copy file name to clipboardExpand all lines: articles/aks/manage-azure-rbac.md
+21-13Lines changed: 21 additions & 13 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -103,6 +103,13 @@ az role assignment create --role "Azure Kubernetes Service RBAC Admin" --assigne
103
103
> az role assignment create --role "Azure Kubernetes Service RBAC Reader" --assignee <AAD-ENTITY-ID> --scope $AKS_ID/namespaces/<namespace-name>
104
104
> ```
105
105
106
+
> [!NOTE]
107
+
> After creating role assignments scoped to a desired namespace, you won't be able to see it in "role assignments" under "Access control (IAM)" in the Azure portal. You can find it by using the [`az role assignment list`][az-role-assignment-list] command.
108
+
>
109
+
```azurecli-interactive
110
+
> az role assignment list --scope $AKS_ID/namespaces/<namespace-name>
111
+
> ```
112
+
106
113
## Create custom roles definitions
107
114
108
115
The following example custom role definition allows a user to only read deployments and nothing else. For the full list of possible actions, see [Microsoft.ContainerService operations](../role-based-access-control/resource-provider-operations.md#microsoftcontainerservice).
@@ -215,19 +222,20 @@ To learn more about AKS authentication, authorization, Kubernetes RBAC, and Azur
0 commit comments