You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
title: Microsoft Entra roles assigned by Service Connector
2
+
title: Microsoft Entra Roles Assigned by Service Connector
3
3
description: Understand RBAC roles assigned by Service Connector when using a managed identity in Microsoft Azure.
4
4
#customer intent: As a developer, I want to understand RBAC roles assigned by Service Connector when using a managed identity, so that I can understand access permissions.
5
5
author: maud-lv
6
6
ms.author: malev
7
7
ms.service: service-connector
8
8
ms.topic: concept-article
9
-
ms.date: 06/25/2024
9
+
ms.date: 07/23/2025
10
10
---
11
11
# Microsoft Entra roles assigned by Service Connector
12
12
13
-
Service Connector's purpose is to simplify the process of connecting various Azure services together. When a connection is created using Service Connector, Service Connector configures the authentication between these Azure services.
13
+
Service Connector simplifies the process of connecting Azure services together. When you use Service Connector to create a connection, Service Connector configures the authentication between these Azure services.
14
14
15
-
To do this, Service Connector uses Azure's [role-based access control (RBAC)](../role-based-access-control/overview.md) authorization system that provides access management to Azure resources.
15
+
Service Connector uses Azure's [role-based access control (RBAC)](../role-based-access-control/overview.md) authorization system that provides access management to Azure resources.
16
16
17
17
This article provides a summary of the roles assigned by Service Connector by default, and explains how to choose a different role.
18
18
19
19
## Built-in roles
20
20
21
-
By default, when a user selects one of the authentication types listed below, Service Connector assigns the managed identity the roles listed in the table that follows.
21
+
By default, when you select an authentication type from this list, Service Connector assigns the managed identity the roles listed in the table that follows.
@@ -43,15 +43,15 @@ By default, when a user selects one of the authentication types listed below, Se
43
43
| Azure OpenAI Service | Cognitive Services OpenAI Contributor | Full access including the ability to fine-tune, deploy, and generate text. | a001fd3d-188f-4b5d-821b-7da978bf7442 |
44
44
| Azure Cognitive Service | Cognitive Services User | Lets you read and list keys of Cognitive Services. | a97b65f3-24c7-4388-baec-2e87135dc908 |
45
45
46
-
For more information about these roles, go to [Azure built-in roles](../role-based-access-control/built-in-roles.md)
46
+
For more information about these roles, see [Azure built-in roles](../role-based-access-control/built-in-roles.md).
47
47
48
48
## Role customization
49
49
50
-
When creating a new connection in Service connector, users can choose other roles than the default ones. This is done in the Azure portal in the Service Connector menu, in the **Authentication** tab, under**Advanced** > **Role**.
50
+
When you create a new connection in Service connector, you can choose roles other than the default ones. Choose roles in the Azure portal in the Service Connector menu. In the **Authentication** tab, select**Advanced** > **Role**.
51
51
52
52
:::image type="content" source="./media/microsoft-entra-roles/customize-role.png" alt-text="Screenshot of the Azure portal, showing how to edit a connection's role.":::
0 commit comments