|
1 | 1 | ---
|
2 | 2 | title: Onboard a customer to Azure delegated resource management
|
3 | 3 | description: Learn how to onboard a customer to Azure delegated resource management, allowing their resources to be accessed and managed through your own tenant.
|
4 |
| -ms.date: 12/12/2019 |
| 4 | +ms.date: 12/17/2019 |
5 | 5 | ms.topic: conceptual
|
6 | 6 | ---
|
7 | 7 |
|
@@ -29,7 +29,7 @@ To onboard a customer's tenant, it must have an active Azure subscription. You'l
|
29 | 29 | - The tenant ID of the customer's tenant (which will have resources managed by the service provider)
|
30 | 30 | - The subscription IDs for each specific subscription in the customer's tenant that will be managed by the service provider (or that contains the resource group(s) that will be managed by the service provider)
|
31 | 31 |
|
32 |
| -If you don't have this info already, you can retrieve it in one of the following ways. |
| 32 | +If you don't have this info already, you can retrieve it in one of the following ways. Be sure and use these exact values in your deployment. |
33 | 33 |
|
34 | 34 | ### Azure portal
|
35 | 35 |
|
@@ -108,9 +108,12 @@ To onboard your customer, you'll need to create an [Azure Resource Manager](../.
|
108 | 108 | |Field |Definition |
|
109 | 109 | |---------|---------|
|
110 | 110 | |**mspOfferName** |A name describing this definition. This value is displayed to the customer as the title of the offer. |
|
111 |
| -|**mspOfferDescription** |A brief description of your offer (for example, "Contoso VM management offer") | |
112 |
| -|**managedByTenantId** |Your tenant ID | |
113 |
| -|**authorizations** |The **principalId** values for the users/groups/SPNs from your tenant, each with a **principalIdDisplayName** to help your customer understand the purpose of the authorization, and mapped to a built-in **roleDefinitionId** value to specify the level of access | |
| 111 | +|**mspOfferDescription** |A brief description of your offer (for example, "Contoso VM management offer"), | |
| 112 | +|**managedByTenantId** |Your tenant ID. | |
| 113 | +|**authorizations** |The **principalId** values for the users/groups/SPNs from your tenant, each with a **principalIdDisplayName** to help your customer understand the purpose of the authorization, and mapped to a built-in **roleDefinitionId** value to specify the level of access, | |
| 114 | + |
| 115 | +> [!TIP] |
| 116 | +> Be sure that your **managedByTenantID**, **principalIdDisplayName**, and **roleDefinitionId** entries are identical to the values used by Azure. Do not use any capital letters in these values. |
114 | 117 |
|
115 | 118 | The onboarding process requires an Azure Resource Manager template (provided in our [samples repo](https://github.com/Azure/Azure-Lighthouse-samples/) and a corresponding parameters file that you modify to match your configuration and define your authorizations.
|
116 | 119 |
|
|
0 commit comments