|
1 | 1 | ---
|
2 | 2 | title: Azure role-based access control
|
3 |
| -titleSuffix: Azure Lab Services |
4 |
| -description: Learn how Azure Lab Services provides protection with Azure role-based access control (Azure RBAC) integration. |
| 3 | +titleSuffix: Azure Deployment Environments |
| 4 | +description: Learn how Azure Deployment Environments provides protection with Azure role-based access control (Azure RBAC) integration. |
5 | 5 | services: lab-services
|
6 | 6 | ms.service: lab-services
|
7 | 7 | author: RoseHJM
|
@@ -65,8 +65,8 @@ The following table shows common Deployment Environments activities and the role
|
65 | 65 | | **Activity** | **Role type** | **Role** | **Scope** |
|
66 | 66 | |---|---|---|---|
|
67 | 67 | | Grant permission to create a resource group. | Platform engineer | Owner or Contributor | Subscription |
|
68 |
| -| Grant permission to submit a Microsoft support ticket, including to [request capacity](capacity-limits.md). | Platform engineer | Owner, Contributor, Support Request Contributor | Subscription | |
69 |
| -| Grant permission to create environment types in a project. | Platform engineer | [Custom role](../../role-based-access-control/custom-roles-portal.md): Microsoft.Authorization/roleAssignments/write | Subscription | |
| 68 | +| Grant permission to submit a Microsoft support ticket, including to [request a quota limit increase](how-to-request-quota-increase.md). | Platform engineer | Owner, Contributor, Support Request Contributor | Subscription | |
| 69 | +| Grant permission to create environment types in a project. | Platform engineer | [Custom role](../role-based-access-control/custom-roles-portal.md): Microsoft.Authorization/roleAssignments/write | Subscription | |
70 | 70 | | | | Owner, Contributor, or Project Admin | Project |
|
71 | 71 | | Grant permission to assign roles to other users. | Platform engineer | Owner | Resource group |
|
72 | 72 | | Grant permission to: | Platform engineer | Owner, Contributor | Resource group |
|
@@ -116,7 +116,7 @@ Assign the Contributor role to give a user full control to create or manage dev
|
116 | 116 |
|
117 | 117 | To create a project-level environment type in Deployment Environments, you must assign the Owner role or the User Access Administrator role, for the subscription that is being mapped in the environment type in the project. Alternatively, to avoid assigning broad permissions at the subscription level, you can create and assign a custom role that applies Write permissions. Apply the cuustom role at the subscription that is being mapped in the environment type in the project.
|
118 | 118 |
|
119 |
| -To learn how to Create a custom role with *Microsoft.Authorization/roleAssignments/write* and assign it at subscription level, see: [Create a custom role](../../role-based-access-control/custom-roles-portal.md). |
| 119 | +To learn how to Create a custom role with *Microsoft.Authorization/roleAssignments/write* and assign it at subscription level, see: [Create a custom role](../role-based-access-control/custom-roles-portal.md). |
120 | 120 |
|
121 | 121 | :::image type="icon" source="media/concept-deployment-environments-role-based-access-control/deployment-environments-custom-scopes.png" alt-text="Diagram that shows the custom role assignment at the subscription for Azure Deployment Environments" lightbox="media/concept-deployment-environments-role-based-access-control/deployment-environments-custom-scopes.png":::
|
122 | 122 |
|
|
0 commit comments