Skip to content

Commit 8fd11a9

Browse files
Merge pull request #228015 from spelluru/egridroles0221
Event Grid RBAC roles
2 parents b0f94a6 + 520b0c2 commit 8fd11a9

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

articles/event-grid/security-authorization.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ For a list of operation supported by Azure Event Grid, run the following Azure C
1515
az provider operation show --namespace Microsoft.EventGrid
1616
```
1717

18-
The following operations return potentially secret information, which gets filtered out of normal read operations. It's recommended that you restrict access to these operations.
18+
The following operations return potentially secret information, which gets filtered out of normal read operations. We recommend that you restrict access to these operations.
1919

2020
* Microsoft.EventGrid/eventSubscriptions/getFullUrl/action
2121
* Microsoft.EventGrid/topics/listKeys/action
@@ -32,10 +32,10 @@ The Event Grid Contributor role allows you to create and manage Event Grid resou
3232

3333
| Role | Description |
3434
| ---- | ----------- |
35-
| [Event Grid Subscription Reader](../role-based-access-control/built-in-roles.md#eventgrid-eventsubscription-reader) | Lets you read Event Grid event subscriptions. |
36-
| [Event Grid Subscription Contributor](../role-based-access-control/built-in-roles.md#eventgrid-eventsubscription-contributor) | Lets you manage Event Grid event subscription operations. |
37-
| [Event Grid Contributor](../role-based-access-control/built-in-roles.md#eventgrid-contributor) | Lets you create and manage Event Grid resources. |
38-
| [Event Grid Data Sender](../role-based-access-control/built-in-roles.md#eventgrid-data-sender) | Lets you send events to Event Grid topics. |
35+
| [`EventGrid EventSubscription Reader`](../role-based-access-control/built-in-roles.md#eventgrid-eventsubscription-reader) | Lets you read Event Grid event subscriptions. |
36+
| [`EventGrid EventSubscription Contributor`](../role-based-access-control/built-in-roles.md#eventgrid-eventsubscription-contributor) | Lets you manage Event Grid event subscription operations. |
37+
| [`EventGrid Contributor`](../role-based-access-control/built-in-roles.md#eventgrid-contributor) | Lets you create and manage Event Grid resources. |
38+
| [`EventGrid Data Sender`](../role-based-access-control/built-in-roles.md#eventgrid-data-sender) | Lets you send events to Event Grid topics. |
3939

4040

4141
> [!NOTE]
@@ -90,7 +90,7 @@ The following are sample Event Grid role definitions that allow users to take di
9090
}
9191
```
9292

93-
**EventGridContributorRole.json**: Allows all event grid actions.
93+
**EventGridContributorRole.json**: Allows all Event Grid actions.
9494

9595
```json
9696
{
@@ -126,14 +126,14 @@ If you're using an event handler that isn't a WebHook (such as an event hub or q
126126
You must have the **Microsoft.EventGrid/EventSubscriptions/Write** permission on the resource that is the event source. You need this permission because you're writing a new subscription at the scope of the resource. The required resource differs based on whether you're subscribing to a system topic or custom topic. Both types are described in this section.
127127

128128
### System topics (Azure service publishers)
129-
For system topics, if you are not the owner or contributor of the source resource, you need permission to write a new event subscription at the scope of the resource publishing the event. The format of the resource is:
129+
For system topics, if you aren't the owner or contributor of the source resource, you need permission to write a new event subscription at the scope of the resource publishing the event. The format of the resource is:
130130
`/subscriptions/{subscription-id}/resourceGroups/{resource-group-name}/providers/{resource-provider}/{resource-type}/{resource-name}`
131131

132132
For example, to subscribe to an event on a storage account named **myacct**, you need the Microsoft.EventGrid/EventSubscriptions/Write permission on:
133133
`/subscriptions/####/resourceGroups/testrg/providers/Microsoft.Storage/storageAccounts/myacct`
134134

135135
### Custom topics
136-
For custom topics, you need permission to write a new event subscription at the scope of the event grid topic. The format of the resource is:
136+
For custom topics, you need permission to write a new event subscription at the scope of the Event Grid topic. The format of the resource is:
137137
`/subscriptions/{subscription-id}/resourceGroups/{resource-group-name}/providers/Microsoft.EventGrid/topics/{topic-name}`
138138

139139
For example, to subscribe to a custom topic named **mytopic**, you need the Microsoft.EventGrid/EventSubscriptions/Write permission on:

0 commit comments

Comments
 (0)