Merge pull request #247578 from karla-escobar/kescobar/CustomeroleDMSMySQL

Custom role documentation for MySQL migrations DMS

Author: AnnaMHuff

articles/dms/resource-custom-roles-mysql-database-migration-service.md

@@ -0,0 +1,80 @@
+---
+title: "Custom roles for MySQL to Azure Database for MySQL migrations using Database Migration Service"
+titleSuffix: Azure Database Migration Service
+description: Learn to use the custom roles for MySQL to Azure Database for MySQL migrations.
+author: karlaescobar
+ms.author: karlaescobar
+ms.date: 08/07/2023
+ms.service: dms
+ms.topic: conceptual
+---
+
+# Custom roles for MySQL to Azure Database for MySQL migrations using Database Migration Service
+
+This article explains how to set up a custom role for MySQL to Azure Database for MySQL migrations using DMS.
+
+The role has no permission to create a new Database Migration Service and no permission to create a database migration project. Meaning the user assigned to the custom role will need to have an already created Database Migration Service and migration project under the assigned resource group. The user will then be able to create and run migration activities under the migration project.
+
+```json
+{
+    "properties": {
+        "roleName": "DmsCustomRoleDemoforMySQL",
+        "description": "",
+        "assignableScopes": [
+            "/subscriptions/<DMSSubscription>/resourceGroups/<dmsServiceRG>"
+        ],
+        "permissions": [
+            {
+                "actions": [
+                    "Microsoft.DataMigration/locations/operationResults/read",
+                    "Microsoft.DataMigration/locations/operationStatuses/read",
+                    "Microsoft.DataMigration/services/read",
+                    "Microsoft.DataMigration/services/stop/action",
+                    "Microsoft.DataMigration/services/start/action",
+                    "Microsoft.DataMigration/services/checkStatus/*",
+                    "Microsoft.DataMigration/services/configureWorker/action",
+                    "Microsoft.DataMigration/services/addWorker/action",
+                    "Microsoft.DataMigration/services/removeWorker/action",
+                    "Microsoft.DataMigration/services/updateAgentConfig/action",
+                    "Microsoft.DataMigration/services/slots/read",
+                    "Microsoft.DataMigration/services/projects/*",
+                    "Microsoft.DataMigration/services/serviceTasks/read",
+                    "Microsoft.DataMigration/services/serviceTasks/write",
+                    "Microsoft.DataMigration/services/serviceTasks/delete",
+                    "Microsoft.DataMigration/services/serviceTasks/cancel/action",
+                    "Microsoft.DBforMySQL/flexibleServers/read",
+                    "Microsoft.DBforMySQL/flexibleServers/databases/read",
+                    "Microsoft.DBforMySQL/servers/read",
+                    "Microsoft.DBforMySQL/servers/databases/read",
+                    "Microsoft.Resources/subscriptions/resourceGroups/read",
+                    "Microsoft.DataMigration/skus/read"
+                ],
+                "notActions": [],
+                "dataActions": [],
+                "notDataActions": []
+            }
+        ]
+    }
+}
+```
+You can use either the Azure portal, AZ PowerShell, Azure CLI or Azure REST API to create the roles.
+
+For more information, see the articles [Create custom roles using the Azure portal](../role-based-access-control/custom-roles-portal.md) and [Azure custom roles](../role-based-access-control/custom-roles.md).
+
+## Role assignment
+
+To assign a role to users, open the Azure portal, perform the following steps:
+
+1. Navigate to the resource, go to **Access Control**, and then scroll to find the custom roles you created.
+
+2. Select the appropriate role, select the User, and then save the changes.
+
+  The user now appears listed on the **Role assignments** tab.
+
+## Next steps
+
+* For information about Azure Database for MySQL - Flexible Server, see [Overview - Azure Database for MySQL Flexible Server](./../mysql/flexible-server/overview.md).
+* For information about Azure Database Migration Service, see [What is Azure Database Migration Service?](./dms-overview.md).
+* For information about known issues and limitations when migrating to Azure Database for MySQL - Flexible Server using DMS, see [Known Issues With Migrations To Azure Database for MySQL - Flexible Server](./known-issues-azure-mysql-fs-online.md).
+* For information about known issues and limitations when performing migrations using DMS, see [Common issues - Azure Database Migration Service](./known-issues-troubleshooting-dms.md).
+* For troubleshooting source database connectivity issues while using DMS, see article [Issues connecting source databases](./known-issues-troubleshooting-dms-source-connectivity.md).

articles/dms/toc.yml

@@ -50,6 +50,8 @@
     items: 
     - name: MySQL to Azure Database for MySQL Data Migration - MySQL Consistent Backup 
       href: migrate-azure-mysql-consistent-backup.md
+    - name: Custom roles for MySQL to Azure Database for MySQL migrations using DMS 
+      href: resource-custom-roles-mysql-database-migration-service.md
     - name: MySQL to Azure Database for MySQL Data Migration - MySQL Schema Migration 
       href: concepts-migrate-azure-mysql-schema-migration.md
     - name: MySQL to Azure Database for MySQL Data Migration - MySQL Login Migration